c2f1a7dd2775fa49204b83ab9fafdeb4d1d9b6706072f9a45ce4ae32e7dc998d

Submit
Reports

Overview

overview

Static

static

XWorm-RAT-...er.exe

windows10-2004-x64

XWorm-RAT-...ox.dll

windows10-2004-x64

XWorm-RAT-...er.bat

windows10-2004-x64

XWorm-RAT-...I2.dll

windows10-2004-x64

XWorm-RAT-...io.dll

windows10-2004-x64

XWorm-RAT-...ip.dll

windows10-2004-x64

XWorm-RAT-...ws.dll

windows10-2004-x64

XWorm-RAT-...AC.dll

windows10-2004-x64

XWorm-RAT-...OD.dll

windows10-2004-x64

XWorm-RAT-...en.dll

windows10-2004-x64

XWorm-RAT-...ks.dll

windows10-2004-x64

XWorm-RAT-...ot.dll

windows10-2004-x64

XWorm-RAT-...at.dll

windows10-2004-x64

XWorm-RAT-...um.dll

windows10-2004-x64

XWorm-RAT-...rd.dll

windows10-2004-x64

XWorm-RAT-...er.dll

windows10-2004-x64

XWorm-RAT-...ss.dll

windows10-2004-x64

XWorm-RAT-...ts.dll

windows10-2004-x64

XWorm-RAT-...ts.dll

windows10-2004-x64

XWorm-RAT-...WD.dll

windows10-2004-x64

XWorm-RAT-...ns.dll

windows10-2004-x64

XWorm-RAT-...WD.dll

windows10-2004-x64

XWorm-RAT-...il.dll

windows10-2004-x64

XWorm-RAT-...er.dll

windows10-2004-x64

XWorm-RAT-...er.dll

windows10-2004-x64

XWorm-RAT-...la.dll

windows10-2004-x64

XWorm-RAT-...DP.dll

windows10-2004-x64

XWorm-RAT-...NC.dll

windows10-2004-x64

XWorm-RAT-...fo.dll

windows10-2004-x64

XWorm-RAT-...ll.dll

windows10-2004-x64

XWorm-RAT-...er.dll

windows10-2004-x64

XWorm-RAT-...ws.dll

windows10-2004-x64

Analysis

max time kernel
67s
max time network
70s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 02:52

Sharing

Copy URL

Twitter E-mail

Static task

static1

agilenet

4 signatures

Behavioral task

behavioral1

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Command Reciever.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/FastColoredTextBox.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Fixer.bat

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Guna.UI2.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/NAudio.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/7zip.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/ACTWindows.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/AskUAC.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/BSOD.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/BlankScreen.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Bookmarks.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Bot.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Chat.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Chromium.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Clipboard.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Clipper.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Cmstp-Bypass.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Computerdefaults.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/DeletePoints.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/DeleteWD.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/DicordTokens.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/DisableWD.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Email.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Encoder.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/FileSeacher.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/FileZilla.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/HRDP.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/HVNC.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Info.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Install.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/Keylogger.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/KillWindows.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

XWorm-RAT-V2.1-main/XWorm RAT V2.1/Plugins/BSOD.dll
Size

9KB
MD5

e82a0b53c1a19276e006db45bea7de6a
SHA1

3e5ff9be31351de44b4fc633e3d9d19aaecee967
SHA256

3980b827732c01092e7b11b8c1dfecbed4bff66a5e977bcb1c8d9ab14b4ef5b7
SHA512

434c4d81726f4dc1492168bfe3e5761838b2ba457ba4f4e7fe4bd9e9c42287842860688864e1f07a5188fc1fa671d5f76bf851d31072844f6e3342f3a64bc798
SSDEEP

192:kJeGXJtrAeCwGv1GOq11ZTXIW1vnbcgpyAFTLOe:k5ZtrA3C9ZTlnb7pyAUe

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm-RAT-V2.1-main\XWorm RAT V2.1\Plugins\BSOD.dll",#1
1⤵
PID:1656

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads