General
- Target XWorm V5.4 VIP.exe
- Size 13.8MB
- Sample240412-b6vrjafa2s
- SHA256 3b2f28e621af3ea54abf28071e2f36143a30aa87a091f0ee3764c15b2dea4303
- MD5 065a8d7fad2ad13b9f04de982294eb21
- SHA1 7ecf3a3b1a0fa25f701787d98bd42c6f39c2f8ce
- SHA512 0b828b1e545326258f46b7b0c535bfde1fff5ab4bf43bc729803a96e81f4b29a5d0e5a00e59ae392d517051dba37abd5f3b4dacc348242475cfa9e8cbfa16e34
- SSDEEP 196608:msZttF81Wco24/vt8Kf67RQCTbJev4Z4t2WL8PSlsZA6G:mEtM1VR4cRZ0QZaL8qlsZVG
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Behavioral task
behavioral1
Sample
XWorm V5.4 VIP.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
XWorm V5.4 VIP.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target XWorm V5.4 VIP.exe
- Size 13.8MB
- SHA256 3b2f28e621af3ea54abf28071e2f36143a30aa87a091f0ee3764c15b2dea4303
- MD5 065a8d7fad2ad13b9f04de982294eb21
- SHA1 7ecf3a3b1a0fa25f701787d98bd42c6f39c2f8ce
- SHA512 0b828b1e545326258f46b7b0c535bfde1fff5ab4bf43bc729803a96e81f4b29a5d0e5a00e59ae392d517051dba37abd5f3b4dacc348242475cfa9e8cbfa16e34
- SSDEEP 196608:msZttF81Wco24/vt8Kf67RQCTbJev4Z4t2WL8PSlsZA6G:mEtM1VR4cRZ0QZaL8qlsZVG
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Loads dropped DLL
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.