Overview

overview

10

Static

static

10

XWorm V5.6.zip

windows7-x64

1

XWorm V5.6.zip

windows10-2004-x64

1

XWorm V5.6...nd.png

windows7-x64

1

XWorm V5.6...nd.png

windows10-2004-x64

3

XWorm V5.6...ox.dll

windows7-x64

1

XWorm V5.6...ox.dll

windows10-2004-x64

1

XWorm V5.6/Fixer.bat

windows7-x64

1

XWorm V5.6/Fixer.bat

windows10-2004-x64

1

XWorm V5.6...re.dll

windows7-x64

1

XWorm V5.6...re.dll

windows10-2004-x64

1

XWorm V5.6...ms.dll

windows7-x64

1

XWorm V5.6...ms.dll

windows10-2004-x64

1

XWorm V5.6/GeoIP.dat

windows7-x64

3

XWorm V5.6/GeoIP.dat

windows10-2004-x64

3

XWorm V5.6...I2.dll

windows7-x64

1

XWorm V5.6...I2.dll

windows10-2004-x64

1

XWorm V5.6...or.dll

windows7-x64

1

XWorm V5.6...or.dll

windows10-2004-x64

1

XWorm V5.6...1).ico

windows7-x64

1

XWorm V5.6...1).ico

windows10-2004-x64

3

XWorm V5.6...0).ico

windows7-x64

1

XWorm V5.6...0).ico

windows10-2004-x64

3

XWorm V5.6...1).ico

windows7-x64

1

XWorm V5.6...1).ico

windows10-2004-x64

3

XWorm V5.6...2).ico

windows7-x64

1

XWorm V5.6...2).ico

windows10-2004-x64

3

XWorm V5.6...3).ico

windows7-x64

1

XWorm V5.6...3).ico

windows10-2004-x64

3

XWorm V5.6...4).ico

windows7-x64

1

XWorm V5.6...4).ico

windows10-2004-x64

3

XWorm V5.6...5).ico

windows7-x64

1

XWorm V5.6...5).ico

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    XWorm V5.6.zip

  • Size

    18.1MB

  • Sample

    240313-w96nesee43

  • MD5

    3159940ff79863b864e5f561b3a9cb59

  • SHA1

    128ac09108fa8974af987d09c16ca237be06ca07

  • SHA256

    d630df22e456d78b464c97eda9bbdfb7de980af0fbcd6df5348f608a4274002b

  • SHA512

    c98de5a909add70957ea098ace4c5f3a5eab5e8df7739ae0a0ec0fda195f4e68e45c556122b59f7d679ebc86368f4b56726a76c5a98709aebbca1a96caa48ee1

  • SSDEEP

    393216:6wRXCU+zWus0XVZ64ECuN0ASV6mwEBMa0ZTD3Mgo:6wRXyzbswVZ6wuuASkmhBkXMgo

Score
10/10
agentteslastormkittyagilenet

Malware Config

Targets

    • Target

      XWorm V5.6.zip

    • Size

      18.1MB

    • MD5

      3159940ff79863b864e5f561b3a9cb59

    • SHA1

      128ac09108fa8974af987d09c16ca237be06ca07

    • SHA256

      d630df22e456d78b464c97eda9bbdfb7de980af0fbcd6df5348f608a4274002b

    • SHA512

      c98de5a909add70957ea098ace4c5f3a5eab5e8df7739ae0a0ec0fda195f4e68e45c556122b59f7d679ebc86368f4b56726a76c5a98709aebbca1a96caa48ee1

    • SSDEEP

      393216:6wRXCU+zWus0XVZ64ECuN0ASV6mwEBMa0ZTD3Mgo:6wRXyzbswVZ6wuuASkmhBkXMgo

    Score
    1/10
    behavioral1behavioral2

    • Target

      XWorm V5.6/Background.png

    • Size

      924KB

    • MD5

      c93ee3abeff4ac24936471f80b36ec7a

    • SHA1

      0120649571a4b692ff5d10aae8dd87dffd3a0f81

    • SHA256

      2f691caff7e1980cfb069d2608b6470b3a06cdb90467ce47820e8602115a0c5b

    • SHA512

      dd319d1eea708284588ff67268cb23bd7b5cde505f3a8a1e7a27a587920ee5877efa4c1d8264cae48de343cabbf11bbe457b49f348b46288765eeff45d20cab5

    • SSDEEP

      24576:raWlRrTw9AK8jrGL+sUGBcD1MoEX1r/HXKIIfnbY:r/3w/8jzG+OomB/HXKa

    Score
    3/10
    behavioral3behavioral4

    • Target

      XWorm V5.6/FastColoredTextBox.dll

    • Size

      333KB

    • MD5

      b746707265772b362c0ba18d8d630061

    • SHA1

      4b185e5f68c00bef441adb737d0955646d4e569a

    • SHA256

      3701b19ccdac79b880b197756a972027e2ac609ebed36753bd989367ea4ef519

    • SHA512

      fd67f6c55940509e8060da53693cb5fbac574eb1e79d5bd8f9bbd43edbd05f68d5f73994798a0eed676d3e583e1c6cde608b54c03604b3818520fa18ad19aec8

    • SSDEEP

      6144:4FErOIif3RzSHh+20lXs1TzCeBcQeDbNlz7:eEeR52bmeh0n

    Score
    1/10
    behavioral5behavioral6

    • Target

      XWorm V5.6/Fixer.bat

    • Size

      122B

    • MD5

      2dabc46ce85aaff29f22cd74ec074f86

    • SHA1

      208ae3e48d67b94cc8be7bbfd9341d373fa8a730

    • SHA256

      a11703fd47d16020fa099a95bb4e46247d32cf8821dc1826e77a971cdd3c4c55

    • SHA512

      6a50b525bc5d8eb008b1b0d704f9942f72f1413e65751e3de83d2e16ef3cf02ef171b9da3fff0d2d92a81daac7f61b379fcf7a393f46e914435f6261965a53b3

    Score
    1/10
    behavioral7behavioral8

    • Target

      XWorm V5.6/GMap.NET.Core.dll

    • Size

      2.9MB

    • MD5

      819352ea9e832d24fc4cebb2757a462b

    • SHA1

      aba7e1b29bdcd0c5a307087b55c2ec0c7ca81f11

    • SHA256

      58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86

    • SHA512

      6a5b0e1553616ea29ec72c12072ae05bdd709468a173e8adbdfe391b072c001ecacb3dd879845f8d599c6152eca2530cdaa2c069b1f94294f778158eaaebe45a

    • SSDEEP

      49152:ot12Gb/hz7ZsK9qY5uyUW57VC4IB1+fXhQ1hyCzMw/22fSg7gjxhUE/nbTC0xemh:oLbteKb57W1+PhQ1HM1gmJ/SZmh

    Score
    1/10
    behavioral10behavioral9

    • Target

      XWorm V5.6/GMap.NET.WindowsForms.dll

    • Size

      147KB

    • MD5

      32a8742009ffdfd68b46fe8fd4794386

    • SHA1

      de18190d77ae094b03d357abfa4a465058cd54e3

    • SHA256

      741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365

    • SHA512

      22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b

    • SSDEEP

      3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ

    Score
    1/10
    behavioral11behavioral12

    • Target

      XWorm V5.6/GeoIP.dat

    • Size

      1.2MB

    • MD5

      8ef41798df108ce9bd41382c9721b1c9

    • SHA1

      1e6227635a12039f4d380531b032bf773f0e6de0

    • SHA256

      bc07ff22d4ee0b6fafcc12482ecf2981c172a672194c647cedf9b4d215ad9740

    • SHA512

      4c62af04d4a141b94eb3e1b0dbf3669cb53fe9b942072ed7bea6a848d87d8994cff5a5f639ab70f424eb79a4b7adabdde4da6d2f02f995bd8d55db23ce99f01b

    • SSDEEP

      24576:0L/59ah0USm3uwl00odi9AnW1fUmdbxv6bA3wOzRAc3InsZLONMrZb:+/59a6USdi9Ues6bV6boLO6rZ

    Score
    3/10
    behavioral13behavioral14

    • Target

      XWorm V5.6/Guna.UI2.dll

    • Size

      1.9MB

    • MD5

      bcc0fe2b28edd2da651388f84599059b

    • SHA1

      44d7756708aafa08730ca9dbdc01091790940a4f

    • SHA256

      c6264665a882e73eb2262a74fea2c29b1921a9af33180126325fb67a851310ef

    • SHA512

      3bfc3d27c095dde988f779021d0479c8c1de80a404454813c6cae663e3fe63dc636bffa7de1094e18594c9d608fa7420a0651509544722f2a00288f0b7719cc8

    • SSDEEP

      24576:FIVZLRYIVQd9INo3FDbWX7SsOobBTEAjg+m+ZFNwaxwGoHQ/jzK+:+oWodbi9XFEAjg+m+ZFKaxw

    Score
    1/10
    behavioral15behavioral16

    • Target

      XWorm V5.6/IconExtractor.dll

    • Size

      10KB

    • MD5

      640d8ffa779c6dd5252a262e440c66c0

    • SHA1

      3252d8a70a18d5d4e0cc84791d587dd12a394c2a

    • SHA256

      440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2

    • SHA512

      e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32

    • SSDEEP

      192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl

    Score
    1/10
    behavioral17behavioral18

    • Target

      XWorm V5.6/Icons/icon (1).ico

    • Size

      97KB

    • MD5

      4f409511e9f93f175cd18187379e94cb

    • SHA1

      598893866d60cd3a070279cc80fda49ee8c06c9b

    • SHA256

      115f0db669b624d0a7782a7cfaf6e7c17282d88de3a287855dbd6fe0f8551a8f

    • SHA512

      0d1f50243a3959968174aa3fd8f1a163946e9f7e743cbb2c9ef2492073f20da97949bf7d02c229096b97482ff725c08406e2e9aa72c820489535758470cf604f

    • SSDEEP

      1536:RBrn6a7/Zu/M615kfNOfEK3EpQkGhD94TtcmeVQU71qiLSeznFkKeUqvllR/t6c1:RBz65/M6If+3Js+3JFkKeTn1

    Score
    3/10
    behavioral19behavioral20

    • Target

      XWorm V5.6/Icons/icon (10).ico

    • Size

      115KB

    • MD5

      ad1740cb3317527aa1acae6e7440311e

    • SHA1

      7a0f8669ed1950db65632b01c489ed4d9aba434e

    • SHA256

      7a97547954aaad629b0563cc78bca75e3339e8408b70da2ed67fa73b4935d878

    • SHA512

      eee7807b78d4dd27b51cee07a6567e0d022180e007e1241266f4c53f1192c389be97332fcd9f0b8fda50627b40b8cf53027872304a68a210f4d754aa0243b0c2

    • SSDEEP

      768:VDRRKECMsn3H2GkmPe3KUDlGEJ57ukb8rJXAtnvWrpLDvZ8EZN:tjls3WGkoe6Uso9T8r9AtnertLFN

    Score
    3/10
    behavioral21behavioral22

    • Target

      XWorm V5.6/Icons/icon (11).ico

    • Size

      9KB

    • MD5

      1c2cea154deedc5a39daec2f1dadf991

    • SHA1

      6b130d79f314fa9e4015758dea5f331bbe1e8997

    • SHA256

      3b64b79e4092251ebf090164cd2c4815390f34849bbd76fb51085b6a13301b6d

    • SHA512

      dceebc1e6fdfe67afebaef1aff11dd23eda6fae79eb6b222de16edebdfebd8e45de896e501608254fb041824080cb41c81ac972032638407efc6bfeb930bfd00

    • SSDEEP

      96:hc4i1w+DSf0RxO/Csg9nL2CupMqM4pSg36IfgT9A+QdwhFKQfkIvxIm3sW88H:qa+DSf0RxOQnLjoSg3hfG5/X8cOO88H

    Score
    3/10
    behavioral23behavioral24

    • Target

      XWorm V5.6/Icons/icon (12).ico

    • Size

      9KB

    • MD5

      4ea9ab789f5ae96766e3f64c8a4e2480

    • SHA1

      423cb762ce81fab3b2b4c9066fe6ea197d691770

    • SHA256

      84b48ca52dfcd7c74171cf291d2ef1247c3c7591a56b538083834d82857fee50

    • SHA512

      f917059b6f85e4a25909a27cad38b1ef0659161c32df54860226ff3d858127d8da592ea9072ad41d5a9986dd8c04a37e9ad34e2251883a8c2f0933e6aa201414

    • SSDEEP

      192:8mEKEEjOjzSId77Fe0ggzSXlYtAMXa77gieRHw9S1IId:HUNdsgzS1EAEaHB8IId

    Score
    3/10
    behavioral25behavioral26

    • Target

      XWorm V5.6/Icons/icon (13).ico

    • Size

      361KB

    • MD5

      e6fec4185b607e01a938fa405e0a6c6c

    • SHA1

      565e72809586e46700b74931e490e2dc1e7e3db1

    • SHA256

      2e2f17b7dd15007192e7cbbd0019355f8be58068dc5042323123724b99ae4b44

    • SHA512

      13daeb2bf124e573590359f18a1d962157dc635a88319c9ed1a2e8ccad6322fb081579e1e8fbe62ffe55c8286c2bc8acb251d572a4beb00641ad5009a380e513

    • SSDEEP

      384:AyIh9xb9bexqcmOg1/JuiiiiiilllllioiiiilllliiiiiuGxbu:9Ih9Z91hJy

    Score
    3/10
    behavioral27behavioral28

    • Target

      XWorm V5.6/Icons/icon (14).ico

    • Size

      361KB

    • MD5

      0c24edec606abda7c6570b7dcf439298

    • SHA1

      4478a102892e5eb4bb1da8e9c62d17724965691a

    • SHA256

      8fc693238afc49a8098dac1762bfae891e818bb84749c6eef5f1b0c6c8ffddb2

    • SHA512

      f8de3ffb8f9fe1394b3626ae5616213d4612b43f0635fa9053d74ac6fe536657e796289487f245b8abff74f1de8368c0df8e56bf21f540366ed86a378649ea24

    • SSDEEP

      384:FY9tDXICTUj6Q+CUsn2JiAAA/////////A+AA////////AAAiA////kujYYFsG3I:+PMXT0

    Score
    3/10
    behavioral29behavioral30

    • Target

      XWorm V5.6/Icons/icon (15).ico

    • Size

      361KB

    • MD5

      e3143e8c70427a56dac73a808cba0c79

    • SHA1

      63556c7ad9e778d5bd9092f834b5cc751e419d16

    • SHA256

      b2f57a23ecc789c1bbf6037ac0825bf98babc7bf0c5d438af5e2767a27a79188

    • SHA512

      74e0f4b55625df86a87b9315e4007be8e05bbecca4346a6ea06ef5b1528acb5a8bb636ef3e599a3820dbddcf69563a0a22e2c1062c965544fd75ec96fd9803fc

    • SSDEEP

      768:0nnnnnnnnnnnnnnnnnnnnnnnQInU2/gohN/yRUZZZZZZZZZZZaaa0KaaILjeuFgZ:Rkccckccccct

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

agilenetagentteslastormkitty
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
3/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
3/10

behavioral21

Score
1/10

behavioral22

Score
3/10

behavioral23

Score
1/10

behavioral24

Score
3/10

behavioral25

Score
1/10

behavioral26

Score
3/10

behavioral27

Score
1/10

behavioral28

Score
3/10

behavioral29

Score
1/10

behavioral30

Score
3/10

behavioral31

Score
1/10

behavioral32

Score
3/10