xworm | fbd27bc1b63c6a72675e0f75395309118f7423df0dd5ad34c8f55c181cdd7db7

General

Target
تلغيمه تفتحهاش يحمار.exe
Size 32KB
Sample260816-aw2lnawfpg
SHA256 fbd27bc1b63c6a72675e0f75395309118f7423df0dd5ad34c8f55c181cdd7db7
MD5 33e488c927aa7828a149a023305b89c7
SHA1 2d81e9fddec9d36be7d0c177356fde9eb55c42ad
SHA512 895463ae448a3246039160cb8c7d8d139fd12cdcf55bcedd53f00926df3d946163a3861f09dffda310943623174b54a97fd9fe52d724f87bc68892e0487293d5
SSDEEP 384:vYaJWq4Ava7Rm32oDuuw3+q5XwYeLBEuvh0FbOKTCOQLrRApkFTBLTAOZwpGd2vS:JxC3fOJ5yuvGFbO75LrVFo9jiOjhbbc
TLSH
T1F0E23B4877E04312C5FEAFF02DF2710A5275E11BD823EB5E0CD8899A2B67AC146907E6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

17.tcp.cpolar.top:10175

Mutex

wK0bf6t2CpGLtgry

Attributes

install_file
USB.exe

aes.plain

Targets

- Target
  تلغيمه تفتحهاش يحمار.exe
- Size 32KB
- SHA256 fbd27bc1b63c6a72675e0f75395309118f7423df0dd5ad34c8f55c181cdd7db7
- MD5 33e488c927aa7828a149a023305b89c7
- SHA1 2d81e9fddec9d36be7d0c177356fde9eb55c42ad
- SHA512 895463ae448a3246039160cb8c7d8d139fd12cdcf55bcedd53f00926df3d946163a3861f09dffda310943623174b54a97fd9fe52d724f87bc68892e0487293d5
- SSDEEP 384:vYaJWq4Ava7Rm32oDuuw3+q5XwYeLBEuvh0FbOKTCOQLrRApkFTBLTAOZwpGd2vS:JxC3fOJ5yuvGFbO75LrVFo9jiOjhbbc
- TLSH
  T1F0E23B4877E04312C5FEAFF02DF2710A5275E11BD823EB5E0CD8899A2B67AC146907E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

xworm rat trojan
- Detect Xworm Payload
- Family: Xworm
  Xworm is a remote access trojan written in C#.
  trojan rat xworm
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detect Xworm Payload

Family: Xworm

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4