Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
9 IOCs
XWorm Unmasked: Weaponizing Script Obfuscation and Modern Evasion Techniques
Malware Families
Excerpt
Summary The XWorm malware family is known for leveraging VBScript (VBS), Batch (BAT), and PowerShell (PS1) scripts to implement advanced obfuscation and evasion techniques, which are highly modular and weaponizing, and it is also a sophisticated RAT . Technique analysis Sample md5 a2907290e94d10d566afaad71f0a77d2 Sha256 ecb6c26329c5aa711c857bb37431b6d5037b0d28818af4c033c78231d007bb40 combining Scri…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →9 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 9fe006744c553edce0a1a28784b3598d41c53968502ba8c6454757e7eec83e40 | Medium | Score 53/100 | First seen |
| MD5 | da09177d362d929941b12939635446c3 | Medium | Score 53/100 | First seen |
| MD5 | a2907290e94d10d566afaad71f0a77d2 | Medium | Score 53/100 | First seen |
| MD5 | ccc598563c870f9f47b8e367a025073a | Medium | Score 53/100 | First seen |
| SHA256 | 67a85b53d785054676f0db7f79fea437f7a87e1eeb4938c6efed2fc55a061359 | Medium | Score 53/100 | First seen |
| MD5 | 6c0cdb74b4d168c964752ab7d363a99d | Medium | Score 53/100 | First seen |
| SHA256 | c2b502c8dfa3d6ae57b9414fb537b63aea0de2f0f974225dd8280b2bfe8a8353 | Medium | Score 53/100 | First seen |
| SHA256 | ecb6c26329c5aa711c857bb37431b6d5037b0d28818af4c033c78231d007bb40 | Medium | Score 53/100 | First seen |
| IP | 45.138.16.211 | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…