General

  • Target
    https://ik.imagekit.io/rubg0jl92/NOTIFICA%20ACTUACION%20PROCESAL%20RAD20260030701pdf.zip
  • Sample260825-18d91aer2y

Malware Config

Extracted

Family
  • xworm

C2
  • loganwolverin2041.webredirect.org:4521

Mutex
  • Sk9jca4onyf9V7lY

Attributes
  • install_file

    USB.exe

aes.plain

Targets

MITRE ATT&CK Enterprise v16

Tasks