Overview
overview
10Static
static
10XWorm-RAT-...ox.dll
windows10-2004-x64
1XWorm-RAT-...er.exe
windows10-2004-x64
1XWorm-RAT-...er.exe
windows10-2004-x64
1XWorm-RAT-...er.exe
windows10-2004-x64
1XWorm-RAT-...NC.exe
windows10-2004-x64
7XWorm-RAT-...er.exe
windows10-2004-x64
8XWorm-RAT-...ta.exe
windows10-2004-x64
1Analysis
-
max time kernel
35s -
max time network
45s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-10-2022 15:49
Behavioral task
behavioral1
Sample
XWorm-RAT-main/XWorm RAT V2.1/FastColoredTextBox.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral2
Sample
XWorm-RAT-main/XWorm RAT V2.1/Tools/HVNC-Server.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
XWorm-RAT-main/XWorm RAT V2.1/Tools/ResHacker.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral4
Sample
XWorm-RAT-main/XWorm RAT V2.1/Tools/vncviewer.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
XWorm-RAT-main/XWorm RAT V2.1/XHVNC.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral6
Sample
XWorm-RAT-main/XWorm RAT V2.1/XWorm-RAT-V2.1-builder.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
XWorm-RAT-main/XWorm RAT V2.1/resource/data.exe
Resource
win10v2004-20220812-en
General
-
Target
XWorm-RAT-main/XWorm RAT V2.1/resource/data.exe
-
Size
6.5MB
-
MD5
a21db5b6e09c3ec82f048fd7f1c4bb3a
-
SHA1
e7ffb13176d60b79d0b3f60eaea641827f30df64
-
SHA256
67d9b4b35c02a19ab364ad19e1972645eb98e24dcd6f1715d2a26229deb2ccf5
-
SHA512
7caab4f21c33ef90c1104aa7256504ee40ff0a36525b15eb3d48940862346ccf90a16eef87c06d79b0ffd920beb103ed380eae45df8c9286768890b15ed1067c
-
SSDEEP
98304:KAc94bqa9niwFYWLqDuTTTTTTdfPPpWLq+Guf2W2b6F72q0:KAcC9iwFYWuDCPPpWu+GduZ2L
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4904-132-0x0000000000390000-0x0000000000A22000-memory.dmpFilesize
6.6MB
-
memory/4904-133-0x0000000005400000-0x000000000549C000-memory.dmpFilesize
624KB
-
memory/4904-134-0x0000000005A50000-0x0000000005FF4000-memory.dmpFilesize
5.6MB
-
memory/4904-135-0x00000000054A0000-0x0000000005532000-memory.dmpFilesize
584KB
-
memory/4904-136-0x00000000053D0000-0x00000000053DA000-memory.dmpFilesize
40KB
-
memory/4904-137-0x00000000056F0000-0x0000000005746000-memory.dmpFilesize
344KB
-
memory/4904-138-0x0000000009BB0000-0x0000000009C16000-memory.dmpFilesize
408KB