General

  • Target
    c.exe
  • Size 32KB
  • Sample260825-vr7bkaszfw
  • SHA256 d40f8acbd12b28dd4a07ac8ca8ce39289a6ac249757ebb8567b02ac68ea4b133
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • xworm

Version
  • 5.0

C2
  • ljxyfapr71.localto.net:8039

Mutex
  • ZU0VgXW2vEWtZDU4

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target
      c.exe
    • Size 32KB
    • SHA256 d40f8acbd12b28dd4a07ac8ca8ce39289a6ac249757ebb8567b02ac68ea4b133
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Detect Xworm Payload

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

MITRE ATT&CK Matrix

Tasks