General

  • Target
    niga.exe
  • Size 81KB
  • Sample261015-x77clsct9k
  • SHA256 b7c630399cbaa2883c5165412739c4a610767e14efce092af144c3cc5d7aec0e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      niga.exe
    • Size 81KB
    • SHA256 b7c630399cbaa2883c5165412739c4a610767e14efce092af144c3cc5d7aec0e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect Xworm Payload

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v16

Tasks