Evolving Threats: The Adaptive Design of XWorm Malware

XWorm is an evasive, modular malware/infostealer that decrypts Base64/AES configuration, enforces single-instance via a mutex, maintains AES-encrypted C2 connections, collects and exfiltrates system information, can modify the hosts file, supports plugins (e.g., ngrok, encryption modules), and can self-update and delete traces; the report provides technical analysis, screenshots, MITRE ATT&CK mappings, MD5 IOCs, and detection names.