General
-
Target
XWorm V5.6.zip
-
Size
24.7MB
-
Sample
240525-z6ra4sag6t
-
MD5
8bfe5e25aaad64c9392e9929bfa616c4
-
SHA1
b53ecda99b5a1f705c2e0c25ed1c2fae4ffcee86
-
SHA256
cef9f37d4a4fe031fb67049c7b821de626543fefa909c5f588c4135c773aadaa
-
SHA512
ef04339501330a0616a7f16cce6916461f8689449506cf938a23fc638a87239da37c789134f70c89208a022d5da2c276ddfe352916241320fff78cf84fd86ca2
-
SSDEEP
393216:PUQJXeE+3QexeuXHkLKleSIJ9QXEb9oZ2OB8PrF8v1NrbiGYa7BHO7UbzfFCtsKt:PlJX23QgeyHkOeSoVOAuH7GOF2jnJ
Behavioral task
behavioral1
Sample
XWorm V5.6/Xworm V5.6.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
XWorm V5.6/Xworm V5.6.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
XWorm V5.6/Xworm V5.6.exe
-
Size
14.9MB
-
MD5
56ccb739926a725e78a7acf9af52c4bb
-
SHA1
5b01b90137871c3c8f0d04f510c4d56b23932cbc
-
SHA256
90f58865f265722ab007abb25074b3fc4916e927402552c6be17ef9afac96405
-
SHA512
2fee662bc4a1a36ce7328b23f991fa4a383b628839e403d6eb6a9533084b17699a6c939509867a86e803aafef2f9def98fa9305b576dad754aa7f599920c19a1
-
SSDEEP
196608:P4/BAe1d4ihvy85JhhYc3BSL1kehn4inje:PuyIhhkRka4i
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-