General
- Target c.exe
- Size 32KB
- Sample260825-vr7bkaszfw
- SHA256 d40f8acbd12b28dd4a07ac8ca8ce39289a6ac249757ebb8567b02ac68ea4b133
- MD5 ccfecb3d8753c93418e5816344cb76f5
- SHA1 da9bd1cae3745a8963c9e174989a893005938646
- SHA512 50f28fb2779c85c10f9875a82b6e58f1fb45be78a61747d24d347ebe19bf631e45300c2587dfd9993f68657158c6fbf989ac5461c4c28d0a1a020abe1e05affa
- SSDEEP 768:V0dT+x9p94nvGFbO75SWVFo9jaHOjhZb+:kT+xt4n+bO75ScFo9jMOjbq
- TLSH T122E23B4877E08312D9FEAFF02DF271091674E11B9D23DF5E0CD889962B67AC246507EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
c.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
xworm
Version
-
5.0
C2
-
ljxyfapr71.localto.net:8039
Mutex
-
ZU0VgXW2vEWtZDU4
Attributes
-
install_file
USB.exe
aes.plain
Targets
-
- Target c.exe
- Size 32KB
- SHA256 d40f8acbd12b28dd4a07ac8ca8ce39289a6ac249757ebb8567b02ac68ea4b133
- MD5 ccfecb3d8753c93418e5816344cb76f5
- SHA1 da9bd1cae3745a8963c9e174989a893005938646
- SHA512 50f28fb2779c85c10f9875a82b6e58f1fb45be78a61747d24d347ebe19bf631e45300c2587dfd9993f68657158c6fbf989ac5461c4c28d0a1a020abe1e05affa
- SSDEEP 768:V0dT+x9p94nvGFbO75SWVFo9jaHOjhZb+:kT+xt4n+bO75ScFo9jMOjbq
- TLSH T122E23B4877E08312D9FEAFF02DF271091674E11B9D23DF5E0CD889962B67AC246507EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Xworm Payload