General
- Target https://ik.imagekit.io/rubg0jl92/NOTIFICA%20ACTUACION%20PROCESAL%20RAD20260030701pdf.zip
- Sample260825-18d91aer2y
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://ik.imagekit.io/rubg0jl92/NOTIFICA%20ACTUACION%20PROCESAL%20RAD20260030701pdf.zip
Resource
win11ltsc2024-20260709-en
24 signatures
600 seconds
Malware Config
Extracted
Family
-
xworm
C2
-
loganwolverin2041.webredirect.org:4521
Mutex
-
Sk9jca4onyf9V7lY
Attributes
-
install_file
USB.exe
aes.plain
Targets
-
- Target https://ik.imagekit.io/rubg0jl92/NOTIFICA%20ACTUACION%20PROCESAL%20RAD20260030701pdf.zip
-
Detect Xworm Payload
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.