General

  • Target
    XWorm V5.6.7z
  • Size 18.5MB
  • Sample260901-t62tyssfpe
  • SHA256 7c431981e1962c71f936fc53951982071462f853f53c92dc3d4103ee5e3efe70
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      XWorm V5.6/Xworm V5.6.exe
    • Size 14.9MB
    • SHA256 90f58865f265722ab007abb25074b3fc4916e927402552c6be17ef9afac96405
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect Xworm Payload

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v16

Tasks