Overview
overview
10Static
static
10XWorm/Fixer.bat
windows10-1703-x64
1XWorm/NAudio.dll
windows10-1703-x64
1XWorm/Plug...ip.dll
windows10-1703-x64
1XWorm/Plug...ws.dll
windows10-1703-x64
1XWorm/Plug...ne.dll
windows10-1703-x64
1XWorm/Plug...AC.dll
windows10-1703-x64
1XWorm/Plug...OD.dll
windows10-1703-x64
1XWorm/Plug...en.dll
windows10-1703-x64
1XWorm/Plug...ks.dll
windows10-1703-x64
1XWorm/Plugins/Bot.dll
windows10-1703-x64
1XWorm/Plug...at.dll
windows10-1703-x64
1XWorm/Plug...um.dll
windows10-1703-x64
1XWorm/Plug...rd.dll
windows10-1703-x64
1XWorm/Plug...er.dll
windows10-1703-x64
1XWorm/Plug...ss.dll
windows10-1703-x64
1XWorm/Plug...ts.dll
windows10-1703-x64
1XWorm/Plug...ts.dll
windows10-1703-x64
1XWorm/Plug...ns.dll
windows10-1703-x64
1XWorm/Plug...WD.dll
windows10-1703-x64
1XWorm/Plug...il.dll
windows10-1703-x64
1XWorm/Plug...er.dll
windows10-1703-x64
1XWorm/Tool...er.exe
windows10-1703-x64
1XWorm/XHVNC.exe
windows10-1703-x64
1XWorm/XWor...en.exe
windows10-1703-x64
1XWorm/XWorm.exe
windows10-1703-x64
1Analysis
-
max time kernel
53s -
max time network
76s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system -
submitted
21-02-2023 08:28
Behavioral task
behavioral1
Sample
XWorm/Fixer.bat
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
XWorm/NAudio.dll
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
XWorm/Plugins/7zip.dll
Resource
win10-20230220-en
Behavioral task
behavioral4
Sample
XWorm/Plugins/ACTWindows.dll
Resource
win10-20230220-en
Behavioral task
behavioral5
Sample
XWorm/Plugins/All-In-One.dll
Resource
win10-20230220-en
Behavioral task
behavioral6
Sample
XWorm/Plugins/AskUAC.dll
Resource
win10-20230220-en
Behavioral task
behavioral7
Sample
XWorm/Plugins/BSOD.dll
Resource
win10-20230220-en
Behavioral task
behavioral8
Sample
XWorm/Plugins/BlankScreen.dll
Resource
win10-20230220-en
Behavioral task
behavioral9
Sample
XWorm/Plugins/Bookmarks.dll
Resource
win10-20230220-en
Behavioral task
behavioral10
Sample
XWorm/Plugins/Bot.dll
Resource
win10-20230220-en
Behavioral task
behavioral11
Sample
XWorm/Plugins/Chat.dll
Resource
win10-20230220-en
Behavioral task
behavioral12
Sample
XWorm/Plugins/Chromium.dll
Resource
win10-20230220-en
Behavioral task
behavioral13
Sample
XWorm/Plugins/Clipboard.dll
Resource
win10-20230220-en
Behavioral task
behavioral14
Sample
XWorm/Plugins/Clipper.dll
Resource
win10-20230220-en
Behavioral task
behavioral15
Sample
XWorm/Plugins/Cmstp-Bypass.dll
Resource
win10-20230220-en
Behavioral task
behavioral16
Sample
XWorm/Plugins/Computerdefaults.dll
Resource
win10-20230220-en
Behavioral task
behavioral17
Sample
XWorm/Plugins/DeletePoints.dll
Resource
win10-20230220-en
Behavioral task
behavioral18
Sample
XWorm/Plugins/DicordTokens.dll
Resource
win10-20230220-en
Behavioral task
behavioral19
Sample
XWorm/Plugins/DisableWD.dll
Resource
win10-20230220-en
Behavioral task
behavioral20
Sample
XWorm/Plugins/Email.dll
Resource
win10-20230220-en
Behavioral task
behavioral21
Sample
XWorm/Plugins/Encoder.dll
Resource
win10-20230220-en
Behavioral task
behavioral22
Sample
XWorm/Tools/HVNC-Server.exe
Resource
win10-20230220-en
Behavioral task
behavioral23
Sample
XWorm/XHVNC.exe
Resource
win10-20230220-en
Behavioral task
behavioral24
Sample
XWorm/XWorm V2.0 License Gen.exe
Resource
win10-20230220-en
Behavioral task
behavioral25
Sample
XWorm/XWorm.exe
Resource
win10-20230220-en
General
-
Target
XWorm/XHVNC.exe
-
Size
1.9MB
-
MD5
c37f177e2879dc2ecdceaf1aeb449406
-
SHA1
e982cd723945ef180a6625a383fc380d709fa03a
-
SHA256
b34eef7bcfe99893c161988f810f4306533cff5a8de58d715c0ed091af5abbd1
-
SHA512
7832f8329928d608a6e5f9a34045d78fcf16221e498e977d075e14c7a757ec2445e6970359731c34d57ac9535d7586d35bae61e448e64b4ea9af173e2b32cfaf
-
SSDEEP
24576:R3DsCsazef+APWb6+CILRbTcJiWevOIWr9Lrdl5p0WdaMCtGjC+UbC:B8F+CWb6+CILRncZe65rb5p0ehVCre
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/8-117-0x0000000000A80000-0x0000000000C6A000-memory.dmpFilesize
1.9MB
-
memory/8-118-0x00000000059F0000-0x0000000005EEE000-memory.dmpFilesize
5.0MB
-
memory/8-119-0x00000000054F0000-0x0000000005582000-memory.dmpFilesize
584KB
-
memory/8-120-0x0000000005590000-0x000000000562C000-memory.dmpFilesize
624KB
-
memory/8-121-0x0000000005630000-0x0000000005696000-memory.dmpFilesize
408KB
-
memory/8-122-0x0000000005890000-0x00000000058A0000-memory.dmpFilesize
64KB