General

  • Target
    vdscvvb.exe
  • Size 30KB
  • Sample260904-24jvcsaf47
  • SHA256 9b76a32798f57059284f24e540f6e8d70f661a27b2d5d921d26c7983e25832cb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • xworm

Version
  • 3.0

C2
  • vdbvdnfdm-39285.portmap.host:9999

Mutex
  • 88PKFYXy13b3DeC8

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target
      vdscvvb.exe
    • Size 30KB
    • SHA256 9b76a32798f57059284f24e540f6e8d70f661a27b2d5d921d26c7983e25832cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Detect Xworm Payload

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

MITRE ATT&CK Matrix

Tasks