General

  • Target
    MintedToolSetup.exe
  • Size 549KB
  • Sample260816-wsb3gsfr2z
  • SHA256 b8e9baeada243a109a99eca0a640a55bcc21e37f97c27e44cc529b5af07be9d2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • xworm

C2
  • 91.92.40.56:2711

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Targets

    • Target
      MintedToolSetup.exe
    • Size 549KB
    • SHA256 b8e9baeada243a109a99eca0a640a55bcc21e37f97c27e44cc529b5af07be9d2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect Xworm Payload

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks