General

  • Target

    XWorm V5.4.exe

  • Size

    13.8MB

  • Sample

    240406-lpwydafd91

  • MD5

    efb0528d6978337e964d999dacb621df

  • SHA1

    244979b8495d3d173a4359d62ad771f99a0033fc

  • SHA256

    4786ac3ceb9ecdcb98bdd19a0e93750e6c9c0df460751994840f8ea9733cc491

  • SHA512

    4b16aca5638094741a9e5f0e4581b5c3cdbd77835035362468d2a0e077fba0f96b8dd98c4a4ea853b3b623d5b525fe64091daa1b761597b660840a371fbae0df

  • SSDEEP

    196608:msZttF81Wco24/vt8Kf67RQCTbJev4Z4t2WL8PSlsZA6G:mEtM1VR4cRZ0QZaL8qlsZVG

Score
7/10

Malware Config

Targets

    • Target

      XWorm V5.4.exe

    • Size

      13.8MB

    • MD5

      efb0528d6978337e964d999dacb621df

    • SHA1

      244979b8495d3d173a4359d62ad771f99a0033fc

    • SHA256

      4786ac3ceb9ecdcb98bdd19a0e93750e6c9c0df460751994840f8ea9733cc491

    • SHA512

      4b16aca5638094741a9e5f0e4581b5c3cdbd77835035362468d2a0e077fba0f96b8dd98c4a4ea853b3b623d5b525fe64091daa1b761597b660840a371fbae0df

    • SSDEEP

      196608:msZttF81Wco24/vt8Kf67RQCTbJev4Z4t2WL8PSlsZA6G:mEtM1VR4cRZ0QZaL8qlsZVG

    Score
    7/10
    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

MITRE ATT&CK Matrix

Tasks