Resubmissions

09/10/2026, 22:27

261009-2dcclacz8m10

09/10/2026, 22:26

261009-2cndgawz6m10

General

  • Target
    XWormClient.exe
  • Size 104KB
  • Sample261009-2dcclacz8m
  • SHA256 78e18b962568b0b04b28d1cc8d4f030b1613b63dba7d646d8b8d3330a644718c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      XWormClient.exe
    • Size 104KB
    • SHA256 78e18b962568b0b04b28d1cc8d4f030b1613b63dba7d646d8b8d3330a644718c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect Xworm Payload

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks