General
-
Target
XWorm V5.4.exe
-
Size
13.8MB
-
Sample
240406-lpwydafd91
-
MD5
efb0528d6978337e964d999dacb621df
-
SHA1
244979b8495d3d173a4359d62ad771f99a0033fc
-
SHA256
4786ac3ceb9ecdcb98bdd19a0e93750e6c9c0df460751994840f8ea9733cc491
-
SHA512
4b16aca5638094741a9e5f0e4581b5c3cdbd77835035362468d2a0e077fba0f96b8dd98c4a4ea853b3b623d5b525fe64091daa1b761597b660840a371fbae0df
-
SSDEEP
196608:msZttF81Wco24/vt8Kf67RQCTbJev4Z4t2WL8PSlsZA6G:mEtM1VR4cRZ0QZaL8qlsZVG
Behavioral task
behavioral1
Sample
XWorm V5.4.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
XWorm V5.4.exe
-
Size
13.8MB
-
MD5
efb0528d6978337e964d999dacb621df
-
SHA1
244979b8495d3d173a4359d62ad771f99a0033fc
-
SHA256
4786ac3ceb9ecdcb98bdd19a0e93750e6c9c0df460751994840f8ea9733cc491
-
SHA512
4b16aca5638094741a9e5f0e4581b5c3cdbd77835035362468d2a0e077fba0f96b8dd98c4a4ea853b3b623d5b525fe64091daa1b761597b660840a371fbae0df
-
SSDEEP
196608:msZttF81Wco24/vt8Kf67RQCTbJev4Z4t2WL8PSlsZA6G:mEtM1VR4cRZ0QZaL8qlsZVG
Score7/10-
Loads dropped DLL
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-