Overview

overview

10

Static

static

10

XWorm V5.2...ox.dll

windows11-21h2-x64

1

XWorm V5.2...er.bat

windows11-21h2-x64

1

XWorm V5.2...re.dll

windows11-21h2-x64

1

XWorm V5.2...ms.dll

windows11-21h2-x64

1

XWorm V5.2...I2.dll

windows11-21h2-x64

1

XWorm V5.2...or.dll

windows11-21h2-x64

1

XWorm V5.2...db.dll

windows11-21h2-x64

1

XWorm V5.2...db.dll

windows11-21h2-x64

1

XWorm V5.2...ks.dll

windows11-21h2-x64

1

XWorm V5.2...il.dll

windows11-21h2-x64

1

XWorm V5.2...ts.dll

windows11-21h2-x64

1

XWorm V5.2...re.dll

windows11-21h2-x64

1

XWorm V5.2...rs.dll

windows11-21h2-x64

1

XWorm V5.2...ed.dll

windows11-21h2-x64

1

XWorm V5.2...ls.dll

windows11-21h2-x64

1

XWorm V5.2...io.dll

windows11-21h2-x64

1

XWorm V5.2...on.dll

windows11-21h2-x64

1

XWorm V5.2...ws.dll

windows11-21h2-x64

1

XWorm V5.2...ne.dll

windows11-21h2-x64

1

XWorm V5.2...at.dll

windows11-21h2-x64

1

XWorm V5.2...rd.dll

windows11-21h2-x64

1

XWorm V5.2...ss.dll

windows11-21h2-x64

1

XWorm V5.2...er.dll

windows11-21h2-x64

1

XWorm V5.2...er.dll

windows11-21h2-x64

1

XWorm V5.2...er.dll

windows11-21h2-x64

1

XWorm V5.2...DP.dll

windows11-21h2-x64

1

XWorm V5.2...NC.dll

windows11-21h2-x64

1

XWorm V5.2...ry.dll

windows11-21h2-x64

1

XWorm V5.2...ps.dll

windows11-21h2-x64

1

XWorm V5.2...ns.dll

windows11-21h2-x64

1

XWorm V5.2...er.dll

windows11-21h2-x64

1

XWorm V5.2...ps.dll

windows11-21h2-x64

1

Resubmissions

10-07-2024 16:35

240710-t3mwma1amb 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XWorm V5.2 .rar

  • Size

    30.3MB

  • Sample

    240710-t3mwma1amb

  • MD5

    68b6d1867b72e17f1d23acd2a4832ee8

  • SHA1

    e94284ac4809d37ffd4257a9ac70d552825670ba

  • SHA256

    e4b004dd8c3648aee2d1efe073cdf5a79c89fffab06395e9c6b57fde30fcf024

  • SHA512

    3de63c69a17b2ee498eca01b08478b0744930302674a9c6c1490737ab7870bfa35583a26ad3a54d82bf980ac25150c6cf91706d5ee70fbf2a16b27bdd1435851

  • SSDEEP

    786432:hy+VwnbHHdXmR6ZMZ7EU1oFuuTCq6v7AU:bVmnUIM+WheQD

Score
10/10
agentteslastormkittyxwormagilenet

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

AklVKg3zMvmhNJNR

Attributes
  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/HfHNXZk6

aes.plain
aes.plain

Targets

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/FastColoredTextBox.dll

    • Size

      333KB

    • MD5

      b746707265772b362c0ba18d8d630061

    • SHA1

      4b185e5f68c00bef441adb737d0955646d4e569a

    • SHA256

      3701b19ccdac79b880b197756a972027e2ac609ebed36753bd989367ea4ef519

    • SHA512

      fd67f6c55940509e8060da53693cb5fbac574eb1e79d5bd8f9bbd43edbd05f68d5f73994798a0eed676d3e583e1c6cde608b54c03604b3818520fa18ad19aec8

    • SSDEEP

      6144:4FErOIif3RzSHh+20lXs1TzCeBcQeDbNlz7:eEeR52bmeh0n

    Score
    1/10
    behavioral1

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Fixer.bat

    • Size

      122B

    • MD5

      2dabc46ce85aaff29f22cd74ec074f86

    • SHA1

      208ae3e48d67b94cc8be7bbfd9341d373fa8a730

    • SHA256

      a11703fd47d16020fa099a95bb4e46247d32cf8821dc1826e77a971cdd3c4c55

    • SHA512

      6a50b525bc5d8eb008b1b0d704f9942f72f1413e65751e3de83d2e16ef3cf02ef171b9da3fff0d2d92a81daac7f61b379fcf7a393f46e914435f6261965a53b3

    Score
    1/10
    behavioral2

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/GMap.NET.Core.dll

    • Size

      2.9MB

    • MD5

      819352ea9e832d24fc4cebb2757a462b

    • SHA1

      aba7e1b29bdcd0c5a307087b55c2ec0c7ca81f11

    • SHA256

      58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86

    • SHA512

      6a5b0e1553616ea29ec72c12072ae05bdd709468a173e8adbdfe391b072c001ecacb3dd879845f8d599c6152eca2530cdaa2c069b1f94294f778158eaaebe45a

    • SSDEEP

      49152:ot12Gb/hz7ZsK9qY5uyUW57VC4IB1+fXhQ1hyCzMw/22fSg7gjxhUE/nbTC0xemh:oLbteKb57W1+PhQ1HM1gmJ/SZmh

    Score
    1/10
    behavioral3

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/GMap.NET.WindowsForms.dll

    • Size

      147KB

    • MD5

      32a8742009ffdfd68b46fe8fd4794386

    • SHA1

      de18190d77ae094b03d357abfa4a465058cd54e3

    • SHA256

      741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365

    • SHA512

      22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b

    • SSDEEP

      3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ

    Score
    1/10
    behavioral4

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Guna.UI2.dll

    • Size

      1.9MB

    • MD5

      bcc0fe2b28edd2da651388f84599059b

    • SHA1

      44d7756708aafa08730ca9dbdc01091790940a4f

    • SHA256

      c6264665a882e73eb2262a74fea2c29b1921a9af33180126325fb67a851310ef

    • SHA512

      3bfc3d27c095dde988f779021d0479c8c1de80a404454813c6cae663e3fe63dc636bffa7de1094e18594c9d608fa7420a0651509544722f2a00288f0b7719cc8

    • SSDEEP

      24576:FIVZLRYIVQd9INo3FDbWX7SsOobBTEAjg+m+ZFNwaxwGoHQ/jzK+:+oWodbi9XFEAjg+m+ZFKaxw

    Score
    1/10
    behavioral5

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/IconExtractor.dll

    • Size

      10KB

    • MD5

      640d8ffa779c6dd5252a262e440c66c0

    • SHA1

      3252d8a70a18d5d4e0cc84791d587dd12a394c2a

    • SHA256

      440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2

    • SHA512

      e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32

    • SSDEEP

      192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl

    Score
    1/10
    behavioral6

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Mono.Cecil.Mdb.dll

    • Size

      42KB

    • MD5

      1c6aca0f1b1fa1661fc1e43c79334f7c

    • SHA1

      ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d

    • SHA256

      411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b

    • SHA512

      1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76

    • SSDEEP

      768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS

    Score
    1/10
    behavioral7

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Mono.Cecil.Pdb.dll

    • Size

      87KB

    • MD5

      6d5eb860c2be5dbeb470e7d3f3e7dda4

    • SHA1

      80c76660b87c52127b1a7da48e27700f75362041

    • SHA256

      447ede1984bb4acd73bd97c0ec57a11c079cee8301c91fb199ca98c1906d3cc4

    • SHA512

      64cf4fe7de68a35720d2b9338ba9cf182e127d95d72d2ccf7ff5c73a368133663e70c988a460825fa87b2d03717a4447948d5262f56aceb7c3bf1cb3ab5a41a5

    • SSDEEP

      1536:2OCAsdBo+am5OMwr5IlALYKXgAJGsZhTjrjvjCXeO:ZCjta0OMuIlArVJGqT/jveXeO

    Score
    1/10
    behavioral8

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Mono.Cecil.Rocks.dll

    • Size

      27KB

    • MD5

      6e7f0f4fff6c49e3f66127c23b7f1a53

    • SHA1

      14a529f8c7ee9f002d1e93dcf8ff158ab74c7e1a

    • SHA256

      2e2623319bdc362974a78ea4a43f4893011ec257884d24267f4594142fcd436e

    • SHA512

      0c773da6717dd6919cd6241d3cee26ab00bb61ea2dbeff24844a067af4c87ff5cbdb2fe3ada5db4707cee921b3fb353bd12ee22b8490597d4f67ad39bace235e

    • SSDEEP

      384:70ve8JOuJ5iC7n2NwxEXCni+VXcMeDz8PmR1ugLoaeuLMBG9UphJAprjE3uFLHa9:7+m4iCyrXOhG8uRssveum1pMFLHFBvd

    Score
    1/10
    behavioral9

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Mono.Cecil.dll

    • Size

      350KB

    • MD5

      de69bb29d6a9dfb615a90df3580d63b1

    • SHA1

      74446b4dcc146ce61e5216bf7efac186adf7849b

    • SHA256

      f66f97866433e688acc3e4cd1e6ef14505f81df6b26dd6215e376767f6f954bc

    • SHA512

      6e96a510966a4acbca900773d4409720b0771fede37f24431bf0d8b9c611eaa152ba05ee588bb17f796d7b8caaccc10534e7cc1c907c28ddfa54ac4ce3952015

    • SSDEEP

      6144:jIevdbLPNYe8bikm98KXPHhOWY/fFREomhUFD3z:se1PNL+QRfBg/f/EWFD

    Score
    1/10
    behavioral10

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/MonoMod.Backports.dll

    • Size

      138KB

    • MD5

      dd43356f07fc0ce082db4e2f102747a2

    • SHA1

      aa0782732e2d60fa668b0aadbf3447ef70b6a619

    • SHA256

      e375b83a3e242212a2ed9478e1f0b8383c1bf1fdfab5a1cf766df740b631afd6

    • SHA512

      284d64b99931ed1f2e839a7b19ee8389eefaf6c72bac556468a01f3eb17000252613c01dbae88923e9a02f3c84bcab02296659648fad727123f63d0ac38d258e

    • SSDEEP

      3072:kRu+JWxtm5UE1cy/4HJW/SwUif9T2FpsP3Y+RJgv:kRTJWfNE1CuSMlTIeTRm

    Score
    1/10
    behavioral11

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/MonoMod.Core.dll

    • Size

      216KB

    • MD5

      b808181453b17f3fc1ab153bf11be197

    • SHA1

      bce86080b7eb76783940d1ff277e2b46f231efe9

    • SHA256

      da00cdfab411f8f535f17258981ec51d1af9b0bfcee3a360cbd0cb6f692dbcdd

    • SHA512

      a2d941c6e69972f99707ade5c5325eb50b0ec4c5abf6a189eb11a46606fed8076be44c839d83cf310b67e66471e0ea3f6597857a8e2c7e2a7ad6de60c314f7d3

    • SSDEEP

      6144:mV+Fj3NL3NdYIRTdJ3AdHwSOTboZK3MYt:hFj3NL3NdYIRTdJ3AdHp2

    Score
    1/10
    behavioral12

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/MonoMod.ILHelpers.dll

    • Size

      6KB

    • MD5

      6512e89e0cb92514ef24be43f0bf4500

    • SHA1

      a039c51f89656d9d5c584f063b2b675a9ff44b8e

    • SHA256

      1411e4858412ded195f0e65544a4ec8e8249118b76375050a35c076940826cd0

    • SHA512

      9ffb2ff050cce82dbfbbb0e85ab5f976fcd81086b3d8695502c5221c23d14080f0e494a33e0092b4feb2eda12e2130a2f02df3125733c2f5ec31356e92dea00b

    • SSDEEP

      96:XC5172VL9HZNBrfq7LgcA6S8I2DqDXGnADX62WuauAuRt/0:q8xDfYLgcAMtAXG+rPVL/

    Score
    1/10
    behavioral13

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/MonoMod.Iced.dll

    • Size

      623KB

    • MD5

      c24584c6b5bc57ac46727ab15e332c4a

    • SHA1

      dadd68f0fa45845fbc30fd0f8f54e8616cdd2d0b

    • SHA256

      ef4a8f28226db390dd07de13afc01c8000e127c978ebf428a6637f39ac277033

    • SHA512

      aabc699eef08e3483049c7ceb48842deddc52284de7f6f72d56d6eccac3989cc373839aeac61f03e7b2af203744d579fd96a4eb911cfdd0461b151c41dc6771d

    • SSDEEP

      6144:Xw98C3SQzlfuStslPYAH+jUmLdf26bfDcj2511Qxu7F:q8CCYlfuGslPn+jvDTDcj251+xuR

    Score
    1/10
    behavioral14

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/MonoMod.Utils.dll

    • Size

      319KB

    • MD5

      79f1c4c312fdbb9258c2cdde3772271f

    • SHA1

      a143434883e4ef2c0190407602b030f5c4fdf96f

    • SHA256

      f22a4fa1e8b1b70286ecf07effb15d2184454fa88325ce4c0f31ffadb4bef50a

    • SHA512

      b28ed3c063ae3a15cd52e625a860bbb65f6cd38ccad458657a163cd927c74ebf498fb12f1e578e869bcea00c6cd3f47ede10866e34a48c133c5ac26b902ae5d9

    • SSDEEP

      6144:9gPf7SkKpBmBEKFutWL7dyywUQ1MWWavAsXjb:q7Svp8EtO49N

    Score
    1/10
    behavioral15

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/NAudio.dll

    • Size

      502KB

    • MD5

      3b87d1363a45ce9368e9baec32c69466

    • SHA1

      70a9f4df01d17060ec17df9528fca7026cc42935

    • SHA256

      81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451

    • SHA512

      1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7

    • SSDEEP

      6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS

    Score
    1/10
    behavioral16

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Newtonsoft.Json.dll

    • Size

      695KB

    • MD5

      195ffb7167db3219b217c4fd439eedd6

    • SHA1

      1e76e6099570ede620b76ed47cf8d03a936d49f8

    • SHA256

      e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d

    • SHA512

      56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac

    • SSDEEP

      12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/

    Score
    1/10
    behavioral17

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/ActiveWindows.dll

    • Size

      14KB

    • MD5

      eea1f284c21e67f9ae71822798793c28

    • SHA1

      ce3187b35a736a3c18f10f449dfcb793c95dca26

    • SHA256

      77ec3eee197d5c4b9ed3d6c059061c52615276360fe11f13f8a6bb6ce429f42b

    • SHA512

      5b3f72d803f250668b9ada77b1a03ecd8662787b8e51c01a4e334503a5f1545ac9dc341804d0d1552e9c35596443e1a610553e3d1ab80aaef6e0f5283384def4

    • SSDEEP

      192:tpsFElxHxzCXorWcsvaUJwfdBuo1I5+3gqT8AO1tW9Yr6IW1GXZ3+eR7EDmSLOb:cFELRzbrUw/AodT8ptsY7XZ3PED8b

    Score
    1/10
    behavioral18

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/All-In-One.dll

    • Size

      4.8MB

    • MD5

      f24552f5f604c80ba4cf7afd2143df05

    • SHA1

      98883b7bf9b996c788bb501336e388177b9b19c2

    • SHA256

      e050a91599f3e6a89dc84a4825fdea6c4d66e970472aabf48ff586d79b67898c

    • SHA512

      1edb1f6cc4bdb3b69204fa724b2f8a5205b3251f475ae7cf8cb015220a26e9a976c1baa3c938e8fb9df1470795ff579e21b339b58c79f96af96cfdd17eba6c15

    • SSDEEP

      98304:Vl19F9QORkChiDC9OtH7c2iwGxIvPBOw0JefVfQ2a5cFd4KssODtd:F9FPRkC8C9OH7c2ilInz0kfVo26Wsd

    Score
    1/10
    behavioral19

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/Chat.dll

    • Size

      18KB

    • MD5

      66e4c3a843b1076b96c48cfa0b467bcd

    • SHA1

      2768257ff7ddc6107a576c4b739eeb09689772eb

    • SHA256

      6b5beda1f2423aedaf83f210f8cb719d3f61f9d2cd489690fb0066ff0895ab80

    • SHA512

      7912e5806b169a1da88ebf92842ec410ce3dd8d98578054e77cc4381e90ee174a497ea1f38a54c5c65c8475a7928cfc79ae8dd58b979c18f7133c5c83e145879

    • SSDEEP

      384:1UeRbCtl+SLFxdQ0C7sKmsfcrwTKvh6GIKoIsfWUWmf9:Q4SpxaoKmJr0pIsfWXO

    Score
    1/10
    behavioral20

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/Clipboard.dll

    • Size

      14KB

    • MD5

      6ea5b16696c2f2d265c9f864d0c727ba

    • SHA1

      030a0bf757767869428b0a7e11cd40df7a0cfe5a

    • SHA256

      301ab3fe52f974dc5bab98bd127c93d755597fb58a0756539cde7ad4580725b1

    • SHA512

      2426b43886ddf9896d9f27862de08ba9eada25b432c715259b71b000a2b474bcf29ba224ac0f3fad3224ef36b17b250d593f907ce0c18703cc37e152a7321203

    • SSDEEP

      192:g+e2PZKYnw/LzXsJ0zzBa70OFXgNTer149iY6IW1mX/60UCCWk7RSLWMU:Q2ZE3sJ0ha70USTe5Wi2X/6NjMU

    Score
    1/10
    behavioral21

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/Cmstp-Bypass.dll

    • Size

      11KB

    • MD5

      cf15259e22b58a0dfd1156ab71cbd690

    • SHA1

      3614f4e469d28d6e65471099e2d45c8e28a7a49e

    • SHA256

      fa420fd3d1a5a2bb813ef8e6063480099f19091e8fa1b3389004c1ac559e806b

    • SHA512

      7302a424ed62ec20be85282ff545a4ca9e1aecfe20c45630b294c1ae72732465d8298537ee923d9e288ae0c48328e52ad8a1a503e549f8f8737fabe2e6e9ad38

    • SSDEEP

      192:KpXpS1QWlPkiqdE7FNNGGO9mWbpGkjgyaYcIW1vr/8TNU7aL7YiLsO08hdW5:Kp5IfL0mWbEkUyaYir/oNJL7KQ

    Score
    1/10
    behavioral22

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/FileManager.dll

    • Size

      679KB

    • MD5

      b9dea988042c4d9878931cac41d61fb8

    • SHA1

      82885bd2d01d27f4ce3741885256d7db418038b7

    • SHA256

      29b44c17c85f05ced52004db716a156fc9e50b52debc8e061e2ea96957cc0d07

    • SHA512

      81192c5b1f2e67787b569218c03e4c274a2184fb0e762afed6e3608995e3e1d1987306f32f64f28bc287fb09746476b4c7c60479fe0a5cefa186e5b208d8bacd

    • SSDEEP

      12288:j8b+nFeDTzZTmRwm0G/Ot69fN0RXMPgnOIMJhnWkhr48vR:QynF6mRwm0G/Ot6910NMPiOIMJhWk

    Score
    1/10
    behavioral23

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/FileSeacher.dll

    • Size

      478KB

    • MD5

      fe625a7c51e699336f9acc3108437134

    • SHA1

      50099ae8c3679930400261c80ade073157fe4f80

    • SHA256

      68e4e6f42ffdf5ed18f1849e30f83b1baed1cfa57c68f57178bfa875e247c2b7

    • SHA512

      26b9bf3c0b31fe029201c884f7d220b0bfe589d33dd6aa0dfd665c38af07c2352e89859198e0e9b18339c0e6c8f1e9c44358b222106531659aeb0d6f6c6c0c44

    • SSDEEP

      6144:I88L5lWTUVRTw/l97teGtSV41QJDsTDDh0Yhe6dwxLV/tuhgpn5fWRBI+WR:hzTUVRTw1lS4Ys50ie6Cf4gpys

    Score
    1/10
    behavioral24

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/HBrowser.dll

    • Size

      25KB

    • MD5

      79f13be3582c42df73033819d093e1f8

    • SHA1

      45c25633bfd0ab3c4f95b7137eb9671b911ea595

    • SHA256

      f38e74a4bee2cf29d710d7c58eb83e548d92604621a8fb076bdc1e79714b9938

    • SHA512

      e6e4331d26f35ac52d3524da0c6cdbb4bb36af54b57c61bce564bfec8663245bc7e5ff192c44a3c731e9ce7b83fdff40f274347a5241f6322833a92df944adb5

    • SSDEEP

      768:GRTXKBL5/uElFr1TAeQR9bTbz+NYMoFBX:+TXKBLNuqLTORROYnFN

    Score
    1/10
    behavioral25

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/HRDP.dll

    • Size

      1.7MB

    • MD5

      4f16882639fc029fc367503eb820c298

    • SHA1

      1e6b1314507e954649604dd9f80b4c45a93d7e89

    • SHA256

      ef238f294111804c44f465d090a1634b6529d1eba85720b2e373d57cd59f75d6

    • SHA512

      1fc02358b8347fac1acf751f7fe9c5d4d17cc35ee3df2052b69fdd518939092b54b8d29ecbf112d53604c087b01728d8961005d3946880df896998526a578ebf

    • SSDEEP

      24576:EdhrKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:EdMHZ5pdqYH8ia6GcKuR7

    Score
    1/10
    behavioral26

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/HVNC.dll

    • Size

      58KB

    • MD5

      b5ea6d82ec2d4127124eb9467eb5ce16

    • SHA1

      0a27f08f94a80024854721c73c7715af95581da7

    • SHA256

      ecb1a845bc2e813193e628eea48738f2354eb1ce8902a092118aa48ea2ff4bc7

    • SHA512

      ab459d26ce689d5c7fb533fb754b875896c214e0001ecc6e8b061f7cdaf1aec06400f66f506822775337a42b80f4e1e9ab008a658cfacc873cfa83eaab6f1880

    • SSDEEP

      1536:qKtNhYe3TQz12BWR77E3WxD9IhETnYT3CW3:rNhYecz12BWR7WCrKB3

    Score
    1/10
    behavioral27

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/HVNCMemory.dll

    • Size

      39KB

    • MD5

      14ca9b8f7993924b77078e08ec0d5df5

    • SHA1

      fb2b5717da357f6d13bb1127980c22bada68836a

    • SHA256

      8ab3391fa5880be5991133416bae0d5b76daa2d43c8ff92ff44d6dda23386e57

    • SHA512

      64aac1a872666bce5bb86144a6f96bb6905a2d900d76e8d2d6f1cf8b499baefd35c7fb4d6b5150d5717451c5ad632d677ae6f85737d334a7cebbd9d725c9964f

    • SSDEEP

      768:hbsnFtMqFJAkIAW3fY3WNSrfaA9oQoy1bqLRPD:hYF1jARvGWNE/okcb

    Score
    1/10
    behavioral28

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/HiddenApps.dll

    • Size

      45KB

    • MD5

      c5efa70a04a026b9a2fa97b1ea43e840

    • SHA1

      aab2de0ab74c12e04256ff2b113b062dc93179e6

    • SHA256

      f9ef7709f34e944d99ca5bef6af1524d7cf3889894084b7ae61e9202f267a728

    • SHA512

      1348d4ebd3ac5b56eb32820ee14f9aee20a43b7dc3d06dd7fd62c8f227b12a27d0c0376c7d858e78315cd92d17e588bc2e37648c04d146530db706e8b3c4ff1d

    • SSDEEP

      768:zy37gsdDvMZ9+rdm2KExqbMYRQpWk/x0qqBi3X/G0gpfN3ff2oA:idDvML+r/rqbMYRQpl/x5qI/dEdX2J

    Score
    1/10
    behavioral29

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/Informations.dll

    • Size

      22KB

    • MD5

      310ba7a07953ed7f783e89bcff6197e3

    • SHA1

      147aa53e0d7cb027e6c67fa50fcb0dc0c770e157

    • SHA256

      b10616eb3f5e4b0ceffc696179cdb616c78ef970dedbac10845a39985c91a38a

    • SHA512

      554ead0f700dd617eed6055a84ecad288c4779ab20206e7434a8f3443a03a95a501014cd52390eb57570c25ea2bd7a298b96e88e8550d10b2a5db4f9633af529

    • SSDEEP

      384:24svJAz5thUNHcxxypeGQ/0n3TmyxhxJNSLSg4RjjoZ:24suz/LypeGQEjfNSQM

    Score
    1/10
    behavioral30

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/Keylogger.dll

    • Size

      17KB

    • MD5

      40ba99b80654259d0428c7e4f3645948

    • SHA1

      8fa93e0f035694cd8e420aa2232aca859b3a2a6b

    • SHA256

      3361bb2309e4ee31f14081bc170ac530e2ae9d1336026e736190a0304e2e77e4

    • SHA512

      fc1deb29eea114e5a472102a51d49fa253a5c79821acffa930b30089ebecec4312437d4720b46e92149be2ce69aed57dc3939621a596ed6c413397363fa44ee7

    • SSDEEP

      192:uCK9HKDyS0+NKdUxEIj1aq8fgYO1Lnq4Ur1XneDN6IW1Y6Up91KNN10UbnnSL2CV:K5Oe+4dw1IDMO4U5uD8Upih0yZCV

    Score
    1/10
    behavioral31

    • Target

      XWorm V5.2 password 1234/XWorm V5.2/Plugins/Maps.dll

    • Size

      15KB

    • MD5

      b74f037f6c6de44e817660922a3044fc

    • SHA1

      eb5acc30d3f607193bd819e8c0cdaaf70295c5b4

    • SHA256

      ccb32961b904a22c2531313ed7c3733d7288daab181074f034eb4c73a0958a65

    • SHA512

      a547961b87ecdbc0f9bf02381f16e03795dc73eda744a86da2cc07c97d7f1b65642971347d1ca69f36ead63c3b9078b6e0f2ecb4b6f2178a3b9a62f3ffb76579

    • SSDEEP

      384:/HC+Q4WPRdJElcjp8J4jtepa9BX/bS9E2:/HCbRdWle2C5x/u6

    Score
    1/10
    behavioral32

MITRE ATT&CK Matrix

Tasks

static1

agilenetagentteslastormkittyxworm
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10