Overview
overview
10Static
static
10XWorm-main...ox.dll
windows10-2004-x64
1XWorm-main...er.bat
windows10-2004-x64
1XWorm-main...I2.dll
windows10-2004-x64
1XWorm-main...io.dll
windows10-2004-x64
1XWorm-main...ip.dll
windows10-2004-x64
1XWorm-main...ws.dll
windows10-2004-x64
1XWorm-main...AC.dll
windows10-2004-x64
1XWorm-main...OD.dll
windows10-2004-x64
1XWorm-main...en.dll
windows10-2004-x64
1XWorm-main...ks.dll
windows10-2004-x64
1XWorm-main...ot.dll
windows10-2004-x64
1XWorm-main...at.dll
windows10-2004-x64
1XWorm-main...um.dll
windows10-2004-x64
1XWorm-main...rd.dll
windows10-2004-x64
1XWorm-main...er.dll
windows10-2004-x64
1XWorm-main...ss.dll
windows10-2004-x64
1XWorm-main...ts.dll
windows10-2004-x64
1XWorm-main...ts.dll
windows10-2004-x64
1XWorm-main...WD.dll
windows10-2004-x64
1XWorm-main...ns.dll
windows10-2004-x64
1XWorm-main...WD.dll
windows10-2004-x64
1XWorm-main...il.dll
windows10-2004-x64
1XWorm-main...er.dll
windows10-2004-x64
1XWorm-main...er.dll
windows10-2004-x64
1XWorm-main...la.dll
windows10-2004-x64
1XWorm-main...DP.dll
windows10-2004-x64
1XWorm-main...er.exe
windows10-2004-x64
1XWorm-main...er.exe
windows10-2004-x64
1XWorm-main...er.exe
windows10-2004-x64
1XWorm-main...NC.exe
windows10-2004-x64
7XWorm-main...rm.exe
windows10-2004-x64
1XWorm-main...ib.dll
windows10-2004-x64
1Analysis
-
max time kernel
139s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 02:32
Behavioral task
behavioral1
Sample
XWorm-main/XWorm RAT V2.1/FastColoredTextBox.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
XWorm-main/XWorm RAT V2.1/Fixer.bat
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
XWorm-main/XWorm RAT V2.1/Guna.UI2.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
XWorm-main/XWorm RAT V2.1/NAudio.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
XWorm-main/XWorm RAT V2.1/Plugins/7zip.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral6
Sample
XWorm-main/XWorm RAT V2.1/Plugins/ACTWindows.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
XWorm-main/XWorm RAT V2.1/Plugins/AskUAC.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral8
Sample
XWorm-main/XWorm RAT V2.1/Plugins/BSOD.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
XWorm-main/XWorm RAT V2.1/Plugins/BlankScreen.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral10
Sample
XWorm-main/XWorm RAT V2.1/Plugins/Bookmarks.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
XWorm-main/XWorm RAT V2.1/Plugins/Bot.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral12
Sample
XWorm-main/XWorm RAT V2.1/Plugins/Chat.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
XWorm-main/XWorm RAT V2.1/Plugins/Chromium.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral14
Sample
XWorm-main/XWorm RAT V2.1/Plugins/Clipboard.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
XWorm-main/XWorm RAT V2.1/Plugins/Clipper.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral16
Sample
XWorm-main/XWorm RAT V2.1/Plugins/Cmstp-Bypass.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
XWorm-main/XWorm RAT V2.1/Plugins/Computerdefaults.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral18
Sample
XWorm-main/XWorm RAT V2.1/Plugins/DeletePoints.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
XWorm-main/XWorm RAT V2.1/Plugins/DeleteWD.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral20
Sample
XWorm-main/XWorm RAT V2.1/Plugins/DicordTokens.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
XWorm-main/XWorm RAT V2.1/Plugins/DisableWD.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral22
Sample
XWorm-main/XWorm RAT V2.1/Plugins/Email.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
XWorm-main/XWorm RAT V2.1/Plugins/Encoder.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral24
Sample
XWorm-main/XWorm RAT V2.1/Plugins/FileSeacher.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
XWorm-main/XWorm RAT V2.1/Plugins/FileZilla.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral26
Sample
XWorm-main/XWorm RAT V2.1/Plugins/HRDP.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
XWorm-main/XWorm RAT V2.1/Tools/HVNC-Server.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral28
Sample
XWorm-main/XWorm RAT V2.1/Tools/ResHacker.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
XWorm-main/XWorm RAT V2.1/Tools/vncviewer.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral30
Sample
XWorm-main/XWorm RAT V2.1/XHVNC.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
XWorm-main/XWorm RAT V2.1/XWorm.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral32
Sample
XWorm-main/XWorm RAT V2.1/dnlib.dll
Resource
win10v2004-20240508-en
General
-
Target
XWorm-main/XWorm RAT V2.1/XWorm.exe
-
Size
6.5MB
-
MD5
a21db5b6e09c3ec82f048fd7f1c4bb3a
-
SHA1
e7ffb13176d60b79d0b3f60eaea641827f30df64
-
SHA256
67d9b4b35c02a19ab364ad19e1972645eb98e24dcd6f1715d2a26229deb2ccf5
-
SHA512
7caab4f21c33ef90c1104aa7256504ee40ff0a36525b15eb3d48940862346ccf90a16eef87c06d79b0ffd920beb103ed380eae45df8c9286768890b15ed1067c
-
SSDEEP
98304:KAc94bqa9niwFYWLqDuTTTTTTdfPPpWLq+Guf2W2b6F72q0:KAcC9iwFYWuDCPPpWu+GduZ2L
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1940-0-0x0000000074A1E000-0x0000000074A1F000-memory.dmpFilesize
4KB
-
memory/1940-1-0x0000000000FE0000-0x0000000001672000-memory.dmpFilesize
6.6MB
-
memory/1940-2-0x0000000005F10000-0x0000000005FAC000-memory.dmpFilesize
624KB
-
memory/1940-3-0x0000000006560000-0x0000000006B04000-memory.dmpFilesize
5.6MB
-
memory/1940-4-0x0000000006050000-0x00000000060E2000-memory.dmpFilesize
584KB
-
memory/1940-5-0x0000000005FE0000-0x0000000005FEA000-memory.dmpFilesize
40KB
-
memory/1940-6-0x00000000061E0000-0x0000000006236000-memory.dmpFilesize
344KB
-
memory/1940-7-0x0000000074A10000-0x00000000751C0000-memory.dmpFilesize
7.7MB
-
memory/1940-8-0x0000000007480000-0x00000000074E6000-memory.dmpFilesize
408KB
-
memory/1940-9-0x0000000074A10000-0x00000000751C0000-memory.dmpFilesize
7.7MB
-
memory/1940-10-0x0000000074A1E000-0x0000000074A1F000-memory.dmpFilesize
4KB
-
memory/1940-11-0x0000000074A10000-0x00000000751C0000-memory.dmpFilesize
7.7MB