General
- Target Xeno.exe
- Size 50KB
- Sample260905-2vqasatgra
- SHA256 2049b6adabbfa19e0233bf4c178dae5f3c2c97eefdd97749d3f48997681c2f84
- MD5 faa4605c88b38461db181f7b1cc07f60
- SHA1 57a1969b9ef1b0ffdcc886883e609e0ff21c7082
- SHA512 c659a26eb41e7448c11b77e5a6caccd898f640cd1be21e00759b21bf7507bca01a21364580c030120acfb8b115b1c06903bd1ef86b1cb40baaf62033db6a3d77
- SSDEEP 1536:/+s3Kzq/ZXKS53XGkId289kb/ChO1MszY:9u8h5Gn9kb/gO1MsM
- TLSH T17D339D1D77F24126D1FEAFB109B23216C375A6675A13EB4F28C941CB2B1798CCA513E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
xworm
Version
-
XWorm V5.6
C2
-
185.230.163.55:6532
Attributes
-
install_file
USB.exe
-
localhost
127.0.0.1
Targets
-
- Target Xeno.exe
- Size 50KB
- SHA256 2049b6adabbfa19e0233bf4c178dae5f3c2c97eefdd97749d3f48997681c2f84
- MD5 faa4605c88b38461db181f7b1cc07f60
- SHA1 57a1969b9ef1b0ffdcc886883e609e0ff21c7082
- SHA512 c659a26eb41e7448c11b77e5a6caccd898f640cd1be21e00759b21bf7507bca01a21364580c030120acfb8b115b1c06903bd1ef86b1cb40baaf62033db6a3d77
- SSDEEP 1536:/+s3Kzq/ZXKS53XGkId289kb/ChO1MszY:9u8h5Gn9kb/gO1MsM
- TLSH T17D339D1D77F24126D1FEAFB109B23216C375A6675A13EB4F28C941CB2B1798CCA513E2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Xworm Payload
-
Loads dropped DLL