XWorm MS Office Document malware analysis – 62f4a0255f7e

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Microsoft Office Document

3 malicious · 57 files

OFF62f4a0255f7ef4d7b65eafbe6ec86c47XWorm

BINRoot Entry

BIN䡀䆒䑲

BIN䡀䈖䌧䠤

BIN䡀䌋䄱䜵

BIN䡀㬿䏲䐸䖱

BIN䡀㽿䅤䈯䠶

BIN䡀䈏䗤䕸䠨

BIN䡀䈛䌪䗶䜵

BIN䡀䓞䕪䇤䠨

BIN䡀䕙䓲䕨䜷

BIN䡀䌍䈵䗦䕲䠼

BIN䡀䒌䓰䑲䑨䠷

BIN䡀㼿䕷䑬㭪䗤䠤

BIN䡀㼿䕷䑬㹪䒲䠯

BIN䡀㿿䏤䇬䗤䒬䠱

BIN䡀䘌䗶䐲䆊䌷䑲

BIN䆒䑲㹾䒵䘧䗦䆒䑲

BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱

BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨

BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶

BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨

BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦

BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨

BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦

EXE䌋䄱䜵䅾䞽䘌䗶䐲䆊䌷䑲䏍䠯

BIN䌋䄱䜵䅾䞽䕠䓤䈳㼧䗨䓸䕙䊲䄵䠰XWorm

BINSummaryInformation

BINDocumentSummaryInformation

EXEXClient.exeXWorm

Structure

BINResources

Config. Field	Value
Mutex	%Usehuhuhuhuhuhuhu
KEY	ucW/6vhuhuhuhuhuhuhuhuhuhuhu
USBNM	ATbngOhuhuhuhuhuhuhu
LoggerPath	%Usehuhuhuhuhuhuhu
family	xhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Mutex MUTEXmalicious

%Usehuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.