xworm | Xworm V5[.]6 Source Code[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Xworm V5.6 Source Code.rar
Size

6.7MB
MD5

33534f5896684a0896b9eee891f7919e
SHA1

1d1190567270ecabceb4758582b878281973d606
SHA256

e582cb2c1ff18b17af1b7e65776f06228574db2c9b88f692f9dd3b0210495aac
SHA512

a4228d79749e8fa0d3706914c3c0afd12844ec0838fcf50f8bd1e4b4bdc588d45ea37884fb42996011b3087ab570a259eae54c646fa45cc0019598c3e5b2cecc
SSDEEP

196608:CCxC69WoQHm9vRw8bH7cj0fH3z9ANguVLcRxNNRcVs:jg69W/V8jow79AWuVuxLyVs

Score

10^/10

xworm

Malware Config

Signatures

Detect Xworm Payload 1 IoCs

resource	yara_rule
static1/unpack001/Xworm 5.6 SRC/XWorm/Resources.resources	family_xworm

Xworm family
xworm

Files

Xworm V5.6 Source Code.rar
.rar

Password: 2024
Password.txt
Xworm 5.6 SRC/BUILDER.exe
.exe windows:4 windows x64 arch:x64

Password: 2024

Code Sign

25:c9:8d:d2:4e:96:84:d2:e7:ec:6f:71:e5:10:21:36
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2024, 17:32

Not After

18/04/2025, 17:32

Subject

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

18:99:a0:da:12:23:75:55:44:2f:50:ed:cc:62:07:13:19:44:e4:a5:b8:bd:7e:60:35:33:a2:45:f6:2e:10:96
Signer

Actual PE Digest

18:99:a0:da:12:23:75:55:44:2f:50:ed:cc:62:07:13:19:44:e4:a5:b8:bd:7e:60:35:33:a2:45:f6:2e:10:96

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Xworm 5.6 SRC/XWorm.sln
Xworm 5.6 SRC/XWorm/-Module-.cs
Xworm 5.6 SRC/XWorm/ACT.Designer.cs
Xworm 5.6 SRC/XWorm/ACT.cs
.js
Xworm 5.6 SRC/XWorm/ACT.resources
Xworm 5.6 SRC/XWorm/About.Designer.cs
Xworm 5.6 SRC/XWorm/About.cs
.js
Xworm 5.6 SRC/XWorm/About.resources
Xworm 5.6 SRC/XWorm/Builder.Designer.cs
Xworm 5.6 SRC/XWorm/Builder.cs
Xworm 5.6 SRC/XWorm/Builder.resources
Xworm 5.6 SRC/XWorm/Chat.Designer.cs
Xworm 5.6 SRC/XWorm/Chat.cs
.js
Xworm 5.6 SRC/XWorm/Chat.resources
Xworm 5.6 SRC/XWorm/Class8.cs
.js
Xworm 5.6 SRC/XWorm/Client.cs
.js
Xworm 5.6 SRC/XWorm/Clipboard.Designer.cs
Xworm 5.6 SRC/XWorm/Clipboard.cs
.js
Xworm 5.6 SRC/XWorm/Clipboard.resources
Xworm 5.6 SRC/XWorm/Clipper.Designer.cs
Xworm 5.6 SRC/XWorm/Clipper.cs
.js
Xworm 5.6 SRC/XWorm/Clipper.resources
Xworm 5.6 SRC/XWorm/CustomOpen.Designer.cs
Xworm 5.6 SRC/XWorm/CustomOpen.cs
Xworm 5.6 SRC/XWorm/CustomOpen.resources
Xworm 5.6 SRC/XWorm/DDosAttack.Designer.cs
Xworm 5.6 SRC/XWorm/DDosAttack.cs
.js
Xworm 5.6 SRC/XWorm/DDosAttack.resources
Xworm 5.6 SRC/XWorm/EditReg.Designer.cs
Xworm 5.6 SRC/XWorm/EditReg.cs
Xworm 5.6 SRC/XWorm/EditReg.resources
Xworm 5.6 SRC/XWorm/FM.Designer.cs
Xworm 5.6 SRC/XWorm/FM.cs
Xworm 5.6 SRC/XWorm/FM.resources
Xworm 5.6 SRC/XWorm/FilesSearcher.Designer.cs
Xworm 5.6 SRC/XWorm/FilesSearcher.cs
.js
Xworm 5.6 SRC/XWorm/FilesSearcher.resources
Xworm 5.6 SRC/XWorm/Ftp.Designer.cs
Xworm 5.6 SRC/XWorm/Ftp.cs
.js
Xworm 5.6 SRC/XWorm/Ftp.resources
Xworm 5.6 SRC/XWorm/Fun.Designer.cs
Xworm 5.6 SRC/XWorm/Fun.cs
Xworm 5.6 SRC/XWorm/Fun.resources
Xworm 5.6 SRC/XWorm/GClass0.cs
.js
Xworm 5.6 SRC/XWorm/GClass1.cs
.js
Xworm 5.6 SRC/XWorm/GeoIP.cs
.js
Xworm 5.6 SRC/XWorm/HApps.Designer.cs
Xworm 5.6 SRC/XWorm/HApps.cs
.js
Xworm 5.6 SRC/XWorm/HApps.resources
Xworm 5.6 SRC/XWorm/HBrowser.Designer.cs
Xworm 5.6 SRC/XWorm/HBrowser.cs
.js
Xworm 5.6 SRC/XWorm/HBrowser.resources
Xworm 5.6 SRC/XWorm/HRDP.Designer.cs
Xworm 5.6 SRC/XWorm/HRDP.cs
.js
Xworm 5.6 SRC/XWorm/HRDP.resources
Xworm 5.6 SRC/XWorm/HVNC.Designer.cs
Xworm 5.6 SRC/XWorm/HVNC.cs
.js
Xworm 5.6 SRC/XWorm/HVNC.resources
Xworm 5.6 SRC/XWorm/Hash.Designer.cs
Xworm 5.6 SRC/XWorm/Hash.cs
.js
Xworm 5.6 SRC/XWorm/Hash.resources
Xworm 5.6 SRC/XWorm/Helper.cs
.js
Xworm 5.6 SRC/XWorm/Hosts.Designer.cs
Xworm 5.6 SRC/XWorm/Hosts.cs
.js
Xworm 5.6 SRC/XWorm/Hosts.resources
Xworm 5.6 SRC/XWorm/INFO.Designer.cs
Xworm 5.6 SRC/XWorm/INFO.cs
.js
Xworm 5.6 SRC/XWorm/INFO.resources
Xworm 5.6 SRC/XWorm/IconInjector.cs
Xworm 5.6 SRC/XWorm/Item.cs
Xworm 5.6 SRC/XWorm/Keylogger.Designer.cs
Xworm 5.6 SRC/XWorm/Keylogger.cs
.js
Xworm 5.6 SRC/XWorm/Keylogger.resources
Xworm 5.6 SRC/XWorm/LV.cs
Xworm 5.6 SRC/XWorm/ListviewDoubleBuffer.cs
Xworm 5.6 SRC/XWorm/MBox.Designer.cs
Xworm 5.6 SRC/XWorm/MBox.cs
.js
Xworm 5.6 SRC/XWorm/MBox.resources
Xworm 5.6 SRC/XWorm/MIC.Designer.cs
Xworm 5.6 SRC/XWorm/MIC.cs
.js
Xworm 5.6 SRC/XWorm/MIC.resources
Xworm 5.6 SRC/XWorm/Main.Designer.cs
Xworm 5.6 SRC/XWorm/Main.cs
Xworm 5.6 SRC/XWorm/Main.resources
Xworm 5.6 SRC/XWorm/Maps.Designer.cs
Xworm 5.6 SRC/XWorm/Maps.cs
.js
Xworm 5.6 SRC/XWorm/Maps.resources
Xworm 5.6 SRC/XWorm/Messages.cs
.ps1
Xworm 5.6 SRC/XWorm/My/MyApplication.cs
Xworm 5.6 SRC/XWorm/My/MyComputer.cs
Xworm 5.6 SRC/XWorm/My/MyProject.cs
.js
Xworm 5.6 SRC/XWorm/My/MySettings.Designer.cs
Xworm 5.6 SRC/XWorm/My/MySettings.settings
Xworm 5.6 SRC/XWorm/My/MySettingsProperty.cs
Xworm 5.6 SRC/XWorm/My/Resources/Resources.cs
.vbs
Xworm 5.6 SRC/XWorm/Performance.Designer.cs
Xworm 5.6 SRC/XWorm/Performance.cs
.js
Xworm 5.6 SRC/XWorm/Performance.resources
Xworm 5.6 SRC/XWorm/Port.Designer.cs
Xworm 5.6 SRC/XWorm/Port.cs
.js
Xworm 5.6 SRC/XWorm/Port.resources
Xworm 5.6 SRC/XWorm/ProcessV.Designer.cs
Xworm 5.6 SRC/XWorm/ProcessV.cs
.js
Xworm 5.6 SRC/XWorm/ProcessV.resources
Xworm 5.6 SRC/XWorm/Programs.Designer.cs
Xworm 5.6 SRC/XWorm/Programs.cs
.js
Xworm 5.6 SRC/XWorm/Programs.resources
Xworm 5.6 SRC/XWorm/Properties/AssemblyInfo.cs
Xworm 5.6 SRC/XWorm/Proxy.Designer.cs
Xworm 5.6 SRC/XWorm/Proxy.cs
.js
Xworm 5.6 SRC/XWorm/Proxy.resources
Xworm 5.6 SRC/XWorm/Ransomware.Designer.cs
Xworm 5.6 SRC/XWorm/Ransomware.cs
.js
Xworm 5.6 SRC/XWorm/Ransomware.resources
Xworm 5.6 SRC/XWorm/Registry.Designer.cs
Xworm 5.6 SRC/XWorm/Registry.cs
.js
Xworm 5.6 SRC/XWorm/Registry.resources
Xworm 5.6 SRC/XWorm/RemoteDesktop.Designer.cs
Xworm 5.6 SRC/XWorm/RemoteDesktop.cs
.js
Xworm 5.6 SRC/XWorm/RemoteDesktop.resources
Xworm 5.6 SRC/XWorm/Resources.resources
.vbs
Xworm 5.6 SRC/XWorm/RunPE.Designer.cs
Xworm 5.6 SRC/XWorm/RunPE.cs
.js
Xworm 5.6 SRC/XWorm/RunPE.resources
Xworm 5.6 SRC/XWorm/Server.cs
.js
Xworm 5.6 SRC/XWorm/ServiceManager.Designer.cs
Xworm 5.6 SRC/XWorm/ServiceManager.cs
.js
Xworm 5.6 SRC/XWorm/ServiceManager.resources
Xworm 5.6 SRC/XWorm/Settings.cs
Xworm 5.6 SRC/XWorm/Shell.Designer.cs
Xworm 5.6 SRC/XWorm/Shell.cs
.js
Xworm 5.6 SRC/XWorm/Shell.resources
Xworm 5.6 SRC/XWorm/Sound.Designer.cs
Xworm 5.6 SRC/XWorm/Sound.cs
.js
Xworm 5.6 SRC/XWorm/Sound.resources
Xworm 5.6 SRC/XWorm/SplashScreen.cs
.ps1
Xworm 5.6 SRC/XWorm/StartupManager.Designer.cs
Xworm 5.6 SRC/XWorm/StartupManager.cs
.js
Xworm 5.6 SRC/XWorm/StartupManager.resources
Xworm 5.6 SRC/XWorm/Stealer/AutoFill.cs
Xworm 5.6 SRC/XWorm/Stealer/Bookmark.cs
Xworm 5.6 SRC/XWorm/Stealer/BrsInfo.cs
Xworm 5.6 SRC/XWorm/Stealer/Cookie.cs
Xworm 5.6 SRC/XWorm/Stealer/CreditCard.cs
Xworm 5.6 SRC/XWorm/Stealer/Password.cs
Xworm 5.6 SRC/XWorm/Stealer/Site.cs
Xworm 5.6 SRC/XWorm/TBotNotify.Designer.cs
Xworm 5.6 SRC/XWorm/TBotNotify.cs
.js
Xworm 5.6 SRC/XWorm/TBotNotify.resources
Xworm 5.6 SRC/XWorm/TXT.Designer.cs
Xworm 5.6 SRC/XWorm/TXT.cs
.js
Xworm 5.6 SRC/XWorm/TXT.resources
Xworm 5.6 SRC/XWorm/TcpConnectionForm.Designer.cs
Xworm 5.6 SRC/XWorm/TcpConnectionForm.cs
.js
Xworm 5.6 SRC/XWorm/TcpConnectionForm.resources
Xworm 5.6 SRC/XWorm/ToolsBox.Designer.cs
Xworm 5.6 SRC/XWorm/ToolsBox.cs
Xworm 5.6 SRC/XWorm/ToolsBox.resources
Xworm 5.6 SRC/XWorm/VB$AnonymousDelegate_0.cs
Xworm 5.6 SRC/XWorm/VB$AnonymousDelegate_1.cs
Xworm 5.6 SRC/XWorm/VBCode.Designer.cs
Xworm 5.6 SRC/XWorm/VBCode.cs
.js
Xworm 5.6 SRC/XWorm/VBCode.resources
Xworm 5.6 SRC/XWorm/VoiceChat.Designer.cs
Xworm 5.6 SRC/XWorm/VoiceChat.cs
.js
Xworm 5.6 SRC/XWorm/VoiceChat.resources
Xworm 5.6 SRC/XWorm/WebCam.Designer.cs
Xworm 5.6 SRC/XWorm/WebCam.cs
.js
Xworm 5.6 SRC/XWorm/WebCam.resources
Xworm 5.6 SRC/XWorm/XWorm.csproj
Xworm 5.6 SRC/XWorm/XWorm.ico
Xworm 5.6 SRC/XWorm/XWormTask.cs
Xworm 5.6 SRC/XWorm/app.manifest
Xworm 5.6 SRC/XWorm/ngrok.Designer.cs
Xworm 5.6 SRC/XWorm/ngrok.cs
.js
Xworm 5.6 SRC/XWorm/ngrok.resources

Sharing

General

Malware Config

Signatures

Files

Password: 2024

Password: 2024

Code Sign

25:c9:8d:d2:4e:96:84:d2:e7:ec:6f:71:e5:10:21:36Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

18:99:a0:da:12:23:75:55:44:2f:50:ed:cc:62:07:13:19:44:e4:a5:b8:bd:7e:60:35:33:a2:45:f6:2e:10:96Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 192KB - Virtual size: 191KB

.rsrc Size: 3KB - Virtual size: 2KB

25:c9:8d:d2:4e:96:84:d2:e7:ec:6f:71:e5:10:21:36
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

18:99:a0:da:12:23:75:55:44:2f:50:ed:cc:62:07:13:19:44:e4:a5:b8:bd:7e:60:35:33:a2:45:f6:2e:10:96
Signer

.text
Size: 192KB - Virtual size: 191KB

.rsrc
Size: 3KB - Virtual size: 2KB