xworm | 6912a3c6a741619a8eda088a43e7c2fd2b27a8d301174b28a25c6ea065b4705a

General

Target
12333333.exe
Size 30KB
Sample260930-n992vatwfv
SHA256 6912a3c6a741619a8eda088a43e7c2fd2b27a8d301174b28a25c6ea065b4705a
MD5 e674dd34d3bb55d826dd841fea97769a
SHA1 cb59078f93747a38aaf3d0998aa2978984b1b2de
SHA512 106852d3ded056fac2c4b4c592a593b4c9a9644d92284ba18c531b75b85dc601e3884ec79c11e94ba8b8c78902afe30abecdbab2e6fe0b8e18c8ae9da2ed0b65
SSDEEP 384:y7wTA+5OfhxeelKn4MPLZhspJ/XlYECwaiNnAsbRugtFuBLTIOZw/WVwvn9IkVuK:8Fx7s4EQZ1YETDNAsbBFR9RGOqhubl
TLSH
T1A0D24B087BE58327D5FF2FF229B291020275D807D923DF5E5CD895A76F67A8042003EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

xworm

Version

3.0

C2

38.tcp.vip.cpolar.cn:12402

Mutex

jRunNYrvUBqQBv4a

Attributes

install_file
USB.exe

aes.plain

Targets

- Target
  12333333.exe
- Size 30KB
- SHA256 6912a3c6a741619a8eda088a43e7c2fd2b27a8d301174b28a25c6ea065b4705a
- MD5 e674dd34d3bb55d826dd841fea97769a
- SHA1 cb59078f93747a38aaf3d0998aa2978984b1b2de
- SHA512 106852d3ded056fac2c4b4c592a593b4c9a9644d92284ba18c531b75b85dc601e3884ec79c11e94ba8b8c78902afe30abecdbab2e6fe0b8e18c8ae9da2ed0b65
- SSDEEP 384:y7wTA+5OfhxeelKn4MPLZhspJ/XlYECwaiNnAsbRugtFuBLTIOZw/WVwvn9IkVuK:8Fx7s4EQZ1YETDNAsbBFR9RGOqhubl
- TLSH
  T1A0D24B087BE58327D5FF2FF229B291020275D807D923DF5E5CD895A76F67A8042003EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery xworm rat trojan
- Detect Xworm Payload
- Family: Xworm
  Xworm is a remote access trojan written in C#.
  trojan rat xworm
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detect Xworm Payload

Family: Xworm

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4