agenttesla | 6de215ca9eeb29fc7ce7dd86d3100b7cd169e41de6d98322e30d314937a590d0

Resubmissions

24/07/2025, 21:20

250724-z6v93atyew10

17/03/2024, 15:22

240317-sr9etahg2x

16/03/2024, 09:51

240316-lvyddsge4s10

16/03/2024, 09:50

240316-lt379aae2510

Sharing

Copy URL Twitter E-mail

General

Target
Xworm-V5.6.zip
Size 27.2MB
Sample240316-lt379aae25
SHA256 6de215ca9eeb29fc7ce7dd86d3100b7cd169e41de6d98322e30d314937a590d0
MD5 6d705a9d47cd2c52276edaadaec499ca
SHA1 009b765d869fe1abbdd458a0f1fa7882e196ce45
SHA512 5684d99024915f3f1e909ddf21e5b68e99a2ebcea23b42e6a2bc5739ebdc45543ba6f751288b8ad5abd05863c2ad212b86b9d63051114cff09adac7d0ec54fca
SSDEEP 786432:gXuM5VaUcQlX23QgeyHolbJf7j4/p5lO7XIlGxm67:jsjX23QghI3f7jesmYm+
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  Plugins/HVNCMemory.dll
- Size 39KB
- SHA256 285b462e3cd4a5b207315ad33ee6965a8b98ca58abb8d16882e4bc2d758ff1a4
- MD5 065f0830d1e36f8f44702b0f567082e8
- SHA1 724c33558fcc8ecd86ee56335e8f6eb5bfeac0db
- SHA512 bac0148e1b78a8fde242697bff1bbe10a18ffab85fdced062de3dc5017cd77f0d54d8096e273523b8a3910fe17fac111724acffa5bec30e4d81b7b3bd312d545
- SSDEEP 768:EofXMCBlQ6Kms0n6GE30IU1YKtq9oQog1zq/xPP7:EyXTa6hEZU1YKwo8Uj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  Plugins/HiddenApps.dll
- Size 45KB
- SHA256 6a098f5a7f9328b35d73ee232846b13e2d587d47f473cbc9b3f1d74def7086ea
- MD5 ba2141a7aefa1a80e2091bf7c2ca72db
- SHA1 9047b546ce9c0ea2c36d24a10eb31516a24a047d
- SHA512 91e43620e5717b699e34e658d6af49bba200dcf91ac0c9a0f237ec44666b57117a13bc8674895b7a9cac5a17b2f91cdc3daa5bcc52c43edbabd19bc1ed63038c
- SSDEEP 768:aEN0W4dmvWt9VG2LqIvwYGYRpXpWk/x0qqBi3qMG0gpfN3ffiCIT:SdmvWHVGMVwtYRtpl/x5qIXdEdXiCK
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  Plugins/Informations.dll
- Size 22KB
- SHA256 cba453460be46cfa705817abbe181f9bf65dca6b6cea1ad31629aa08dbeaf72b
- MD5 67a884eeb9bd025a1ef69c8964b6d86f
- SHA1 97e00d3687703b1d7cc0939e45f8232016d009d9
- SHA512 52e852021a1639868e61d2bd1e8f14b9c410c16bfca584bf70ae9e71da78829c1cada87d481e55386eec25646f84bb9f3baee3b5009d56bcbb3be4e06ffa0ae7
- SSDEEP 384:SCUEeL4D574MvGjydqXwxDJop0n3TmyxhxJNgSg4PbOFsK:SCXeL4DSjydqXwx1FjfNfwr
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  Plugins/Keylogger.dll
- Size 17KB
- SHA256 acfe5c3aa2a3bae3437ead42e90044d7eee972ead25c1f7486bea4a23c201d3a
- MD5 246f7916c4f21e98f22cb86587acb334
- SHA1 b898523ed4db6612c79aad49fbd74f71ecdbd461
- SHA512 1c256ca9b9857e6d393461b55e53175b7b0d88d8f3566fd457f2b3a4f241cb91c9207d54d8b0867ea0abd3577d127835beb13157c3e5df5c2b2b34b3339bd15d
- SSDEEP 192:rJV/HNfwK5RSpyv3RIw9RtO1Lnq4Ur1XneDN6IW1Y6Uph1KzaA0UbnnSLWqV:fFl5Rp3RntMO4U5uD8Upml0yhqV
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  Plugins/Maps.dll
- Size 15KB
- SHA256 34b532a4d0560e26b0d5b81407befdc2424aacc9ef56e8b13de8ad0f4b3f1ab6
- MD5 806c3802bfd7a97db07c99a5c2918198
- SHA1 088393a9d96f0491e3e1cf6589f612aa5e1df5f8
- SHA512 ed164822297accd3717b4d8e3927f0c736c060bb7ec5d99d842498b63f74d0400c396575e9fa664ad36ae8d4285cfd91e225423a0c77a612912d66ea9f63356c
- SSDEEP 192:E0XOBqmqKYNg/ymxa07XW5U6chariK8GtnNK7gGteb1/C9T6IW14X/bmjIAd2vLV:mBqmqunYL6thaujK4jtepa9BX/bY1h2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  Plugins/MessageBox.dll
- Size 14KB
- SHA256 bc09b671894c9a36f4eca45dd6fbf958a967acea9e85b66c38a319387b90dd29
- MD5 7db8b7e15194fa60ffed768b6cf948c2
- SHA1 3de1b56cc550411c58cd1ad7ba845f3269559b5c
- SHA512 e7f5430b0d46f133dc9616f9eeae8fb42f07a8a4a18b927dd7497de29451086629dfc5e63c0b2a60a4603d8421c6570967c5dbde498bb480aef353b3ed8e18a1
- SSDEEP 384:56lIcAn3tURnUKCvUUVT/95gG3UX/NZSQW9:56lIL3tUSvbVa/NZG
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  Plugins/Microphone.dll
- Size 540KB
- SHA256 612898afdf9120cfef5843f9b136c66ecc3e0bb6f3d1527d0599a11988b7783c
- MD5 9c3d90ccf5d47f6eef83542bd08d5aeb
- SHA1 0c0aa80c3411f98e8db7a165e39484e8dae424c7
- SHA512 0786f802fbd24d4ab79651298a5ba042c275d7d01c6ac2c9b3ca1e4ee952de7676ec8abf68d226b72696e9480bd4d4615077163efbcda7cff6a5f717736cbdfe
- SSDEEP 12288:+0OeMv3MrIb8CkZKobg3Wi1bRuSvazv+Uro:ROe+WIb8CkZLbg3Wa8Waz2j
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  Plugins/Ngrok-Installer.dll
- Size 400KB
- SHA256 b574aabf02a65aa3b6f7bfff0a574873ce96429d3f708a10f87bc1f6518f14aa
- MD5 3e19341a940638536b4a7891d5b2b777
- SHA1 ca6f5b28e2e54f3f86fd9f45a792a868c82e35b5
- SHA512 06639892ea4a27c8840872b0de450ae1a0dac61e1dcb64523973c629580323b723c0e9074ff2ddf9a67a8a6d45473432ffc4a1736c0ddc74e054ae13b774f3e2
- SSDEEP 12288:Ws6T2x75lFR/RG+BUKPqnwoCMYKIUTJE:WEB+4+1C0IU
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  Plugins/Options.dll
- Size 30KB
- SHA256 5c34aee5196e0f8615b8d1d9017dd710ea28d2b7ac99295d46046d12eea58d78
- MD5 97193fc4c016c228ae0535772a01051d
- SHA1 f2f6d56d468329b1e9a91a3503376e4a6a4d5541
- SHA512 9f6d7da779e8c9d7307f716d4a4453982bb7f090c35947850f13ec3c9472f058fc11e1120a9641326970b9846d3c691e0c2afd430c12e5e8f30abadb5dcf5ed2
- SSDEEP 768:ULxkuz7dDWH839iybgkf/sGRNW9S9dhjcI:ULNHqUPbgQsGRNW9S9
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  Plugins/Pastime.dll
- Size 17KB
- SHA256 a46787527ac34cd71d96226ddfc0a06370b61e4ad0267105be2aec8d82e984c1
- MD5 6430ab4458a703fb97be77d6bea74f5b
- SHA1 59786b619243d4e00d82b0a3b7e9deb6c71b283c
- SHA512 7b6cf7a613671826330e7f8daddc4c7c37b4d191cf4938c1f5b0fb7b467b28a23fb56e412dc82192595cfa9d5b552668ef0aaa938c8ae166029a610b246d3ecc
- SSDEEP 384:WK9Y5jI8MYODPqeivepi5zOY7//fNCsA8/h5U:WK9YNI8MVDZiWwr/TA8/hC
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  Plugins/Performance.dll
- Size 16KB
- SHA256 043b6a0284468934582819996dbaa70b863ab4caa4f968c81c39a33b2ac81735
- MD5 1841c479da7efd24521579053efcf440
- SHA1 0aacfd06c7223b988584a381cb10d6c3f462fc6a
- SHA512 3005e45728162cc04914e40a3b87a1c6fc7ffde5988d9ff382d388e9de4862899b3390567c6b7d54f0ec02283bf64bcd5529319ca32295c109a7420848fa3487
- SSDEEP 384:LtpW2/E3mawGD1XTgOw2QxHN7yVppy6+:JY2ImYRDKHxV
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  Plugins/ProcessManager.dll
- Size 19KB
- SHA256 7cf1921a5f8429b2b9e8197de195cfae2353fe0d8cb98e563bdf1e782fe2ee4e
- MD5 3d4ec14005a25a4cb05b1aa679cf22bf
- SHA1 6f4a827d94ad020bc23fbd04b7d8ca2995267094
- SHA512 0ee72d345d5431c7a6ffc71cf5e37938b93fd346e5a4746f5967f1aa2b69c34ca4ba0d0abd867778d8ca60b56f01e2d7fc5e7cf7c5a39a92015d4df2d68e382e
- SSDEEP 384:2dqZXY/oSd1PTQLvLELadRtZa/rnRvDSQUT5S97/Y5bLOEYQfwrpn45rDhUn1kAO:2dqZXWrQPQQtZqrRrlU+cYv1kAvZc
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  Plugins/Programs.dll
- Size 13KB
- SHA256 953a8276faa4a18685d09cd9187ed3e409e3cccd7daf34b6097f1eb8d96125a4
- MD5 a6734a047b0b57055807a4f33a80d4dd
- SHA1 0b3a78b2362b0fd3817770fdc6dd070e3305615c
- SHA512 7292eab25f0e340e78063f32961eff16bb51895ad46cfd09933c0c30e3315129945d111a877a191fc261ad690ad6b02e1f2cabc4ff2fdac962ee272b41dd6dfa
- SSDEEP 192:Z3eKcfO/TCOAOG+uCno9SFwN4O4FgkT8zr1P9YD6IW1GX/V3wd0yzSLWVb:8PG/TCXF1SamdnTu5lYTX/NwKyNVb
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  Plugins/Ransomware.dll
- Size 20KB
- SHA256 14c2bbccdabb8408395d636b44b99de4b16db2e6bf35181cb71e7be516d83ad9
- MD5 ccc9ea43ead4aa754b91e2039fe0ac1c
- SHA1 f382635559045ac1aeb1368d74e6b5c6e98e6a48
- SHA512 5d05254ba5cd7b1967a84d5b0e6fd23c54766474fb8660a001bf3d21a3f5c8c20fcdb830fb8659a90da96655e6ee818ceefb6afa610cc853b7fba84bb9db4413
- SSDEEP 384:DVSO27QJHvpebFn0LC9Tk7ff2ji+ZMuqI+sHY4k7E7eEDuQZh:DVm7Q1vpebF0LC9TqH2Mj7qtqg
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  Plugins/Recovery.dll
- Size 1.1MB
- SHA256 66dbe3b90371fe58caa957e83c1c1f0acce941a36cf140a0f07e64403dd13303
- MD5 776193701a2ed869b5f1b6e71970a0ac
- SHA1 2f973458531aaa283cdc835af4e24f5f709cbad1
- SHA512 a41f981c861e8d40487a9cd0863f9055165427e10580548e972a47ef47cf3e777aab2df70dc6f464cc3077860e86eda7462e9754f9047a1ecc0ed9721663aeb9
- SSDEEP 12288:LaoFeouLUFNFfcaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc5cbc1a:pFetLic805jbibGATp/j5T
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  Plugins/Regedit.dll
- Size 15KB
- SHA256 2f73dc0f3074848575c0408e02079fd32b7497f8816222ae3ce8c63725a62fe6
- MD5 53a2cfe273c311b64cf5eaca62f8c2fd
- SHA1 4ec95ec4777a0c5b4acde57a3490e1c139a8f648
- SHA512 992b37d92157ae70a106a9835de46a4ac156341208cfe7fb0477dc5fc3bc9ddae71b35e2336fc5c181630bac165267b7229f97be436912dfd9526a020d012948
- SSDEEP 384:0ZMOBwQbGwAspmewuYvpYr3fgr9A8/VjceZ:0ZMOykGRzYwA8/Vl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32