Overview

overview

10

Static

static

10

XWorm-main...ox.dll

windows10-2004-x64

1

XWorm-main...er.bat

windows10-2004-x64

1

XWorm-main...I2.dll

windows10-2004-x64

1

XWorm-main...io.dll

windows10-2004-x64

1

XWorm-main...ip.dll

windows10-2004-x64

1

XWorm-main...ws.dll

windows10-2004-x64

1

XWorm-main...AC.dll

windows10-2004-x64

1

XWorm-main...OD.dll

windows10-2004-x64

1

XWorm-main...en.dll

windows10-2004-x64

1

XWorm-main...ks.dll

windows10-2004-x64

1

XWorm-main...ot.dll

windows10-2004-x64

1

XWorm-main...at.dll

windows10-2004-x64

1

XWorm-main...um.dll

windows10-2004-x64

1

XWorm-main...rd.dll

windows10-2004-x64

1

XWorm-main...er.dll

windows10-2004-x64

1

XWorm-main...ss.dll

windows10-2004-x64

1

XWorm-main...ts.dll

windows10-2004-x64

1

XWorm-main...ts.dll

windows10-2004-x64

1

XWorm-main...WD.dll

windows10-2004-x64

1

XWorm-main...ns.dll

windows10-2004-x64

1

XWorm-main...WD.dll

windows10-2004-x64

1

XWorm-main...il.dll

windows10-2004-x64

1

XWorm-main...er.dll

windows10-2004-x64

1

XWorm-main...er.dll

windows10-2004-x64

1

XWorm-main...la.dll

windows10-2004-x64

1

XWorm-main...DP.dll

windows10-2004-x64

1

XWorm-main...er.exe

windows10-2004-x64

1

XWorm-main...er.exe

windows10-2004-x64

1

XWorm-main...er.exe

windows10-2004-x64

1

XWorm-main...NC.exe

windows10-2004-x64

7

XWorm-main...rm.exe

windows10-2004-x64

1

XWorm-main...ib.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    139s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-05-2024 02:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    XWorm-main/XWorm RAT V2.1/Tools/vncviewer.exe

  • Size

    1.5MB

  • MD5

    b8d15cd10f1e9ff6adeae64fbbeb755b

  • SHA1

    f962549e42b58a056b11a9ba9750a30bc76844d7

  • SHA256

    823168f7ff268a96aa80d915d946411ef214e7597c73312b19f9723d704b1396

  • SHA512

    1478c76b08a8aa9cf9db927ea371c192ade81d8e27d394613f05aa60011fa8bc46ada115ab4c8c9aa75fcf86dbb62f7089a211f58270c984a204c91465cd07af

  • SSDEEP

    24576:Jj/05kjHhc0Vo68/RWyVae30Zh6FSCTpf2kveQn5poM5lcOBo:JY5kdc0G68/RVoe3+MTZ2kFroM5lxBo

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\XWorm-main\XWorm RAT V2.1\Tools\vncviewer.exe
    "C:\Users\Admin\AppData\Local\Temp\XWorm-main\XWorm RAT V2.1\Tools\vncviewer.exe"
    1⤵
      PID:3404
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3668,i,1067197275908310731,12785105794523264014,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
      1⤵
        PID:1368

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\XWorm-main\XWorm RAT V2.1\Tools\options.vnc
        Filesize

        22B

        MD5

        24f5e966d65e79745d3303b950496810

        SHA1

        76b05ca8cac7a49bec0c413270e4af5ce891dbf9

        SHA256

        9b7645a27b48ec94958a9a95326860c811b9fb3b9d82901102671e7c64416d3f

        SHA512

        b77bcc8f62db51c2b120e664d9f78c1896a943d56d4e3fdf7b4520a021458181cf70457ae486b12439905351bac8df875320a02b79b0f8ad4f9eacaa00379c5d

        Download Submit