e9013afbdb2687701cee1fa6f34bf74f8e984adf4b511a07b6ba8dc84d65d086

Submit
Reports

Overview

overview

Static

static

XWorm-RAT-...in.zip

windows11-21h2-x64

XWorm-RAT-...er.exe

windows11-21h2-x64

XWorm-RAT-...ox.dll

windows11-21h2-x64

XWorm-RAT-...er.bat

windows11-21h2-x64

XWorm-RAT-...I2.dll

windows11-21h2-x64

XWorm-RAT-...io.dll

windows11-21h2-x64

XWorm-RAT-...ip.dll

windows11-21h2-x64

XWorm-RAT-...ws.dll

windows11-21h2-x64

XWorm-RAT-...AC.dll

windows11-21h2-x64

XWorm-RAT-...OD.dll

windows11-21h2-x64

XWorm-RAT-...en.dll

windows11-21h2-x64

XWorm-RAT-...ks.dll

windows11-21h2-x64

XWorm-RAT-...ot.dll

windows11-21h2-x64

XWorm-RAT-...at.dll

windows11-21h2-x64

XWorm-RAT-...um.dll

windows11-21h2-x64

XWorm-RAT-...rd.dll

windows11-21h2-x64

XWorm-RAT-...er.dll

windows11-21h2-x64

XWorm-RAT-...ss.dll

windows11-21h2-x64

XWorm-RAT-...ts.dll

windows11-21h2-x64

XWorm-RAT-...ts.dll

windows11-21h2-x64

XWorm-RAT-...WD.dll

windows11-21h2-x64

XWorm-RAT-...ns.dll

windows11-21h2-x64

XWorm-RAT-...WD.dll

windows11-21h2-x64

XWorm-RAT-...il.dll

windows11-21h2-x64

XWorm-RAT-...er.dll

windows11-21h2-x64

XWorm-RAT-...er.dll

windows11-21h2-x64

XWorm-RAT-...la.dll

windows11-21h2-x64

XWorm-RAT-...DP.dll

windows11-21h2-x64

XWorm-RAT-...NC.dll

windows11-21h2-x64

XWorm-RAT-...fo.dll

windows11-21h2-x64

XWorm-RAT-...nd.png

windows11-21h2-x64

XWorm-RAT-...er.php

windows11-21h2-x64

Analysis

max time kernel
32s
max time network
142s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
14/03/2024, 18:26

Sharing

Copy URL

Twitter E-mail

Static task

static1

agilenet

4 signatures

Behavioral task

behavioral1

Sample

XWorm-RAT-V2.1-main.zip

Resource

win11-20240214-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Command Reciever.exe

Resource

win11-20240221-en

xworm ransomware rat trojan

windows11-21h2-x64

17 signatures

150 seconds

Behavioral task

behavioral3

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/FastColoredTextBox.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Fixer.bat

Resource

win11-20240221-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Guna.UI2.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/NAudio.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/7zip.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/ACTWindows.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/AskUAC.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/BSOD.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/BlankScreen.dll

Resource

win11-20240214-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Bookmarks.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Bot.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Chat.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Chromium.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Clipboard.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Clipper.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Cmstp-Bypass.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Computerdefaults.dll

Resource

win11-20240214-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/DeletePoints.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/DeleteWD.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/DicordTokens.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/DisableWD.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Email.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Encoder.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/FileSeacher.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/FileZilla.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/HRDP.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/HVNC.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Info.dll

Resource

win11-20240221-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Tools/Background.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Uploader.php

Resource

win11-20240214-en

windows11-21h2-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/DisableWD.dll
Size

13KB
MD5

7af0f08b780ae3a26118f167a2c2f8b0
SHA1

c473cf621bac31c1af4e59903012fb027dc75105
SHA256

d384ec908583b271588a27748850e4cadf9d8b55a4afdfa54170738da54fc4ef
SHA512

231c59aed5967fb42685b1cd867ade5cf6944c145de290eefc969d57f574cccae09451af3e42416b0c9126bac7e07bb57cbab74be269a9e99619411f79704bb3
SSDEEP

192:iQLEv8T4LLpNkQvmDbeNEDTRQmCkUE2WKU1GO0zb7lgJ1T9IW1Un/3eKtfLie9y1:iojqEdJUEDtw9zbyJ1TMn/3euG4XFU

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm-RAT-V2.1-main\XWorm RAT V2.1\Plugins\DisableWD.dll",#1
1⤵
PID:1788

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads