General
-
Target
XWorm 5.6 By Necrowolf.zip
-
Size
29.0MB
-
Sample
240804-mdrpysshqn
-
MD5
c0241c872960312fd3071cff209fbc5e
-
SHA1
131e432ea6128bbfb6bc1092012d4afd8e2aae27
-
SHA256
20027c560483941c10d60098ea22ee973b647ad934377be62c88ee4acb2fc465
-
SHA512
085c3324c4994eab79205f3522b31634b1963a7bb02a52a9820bd1e80a2ee150d24c370fa619f8f421b1fdb8b185bcffb21c42ea6f7f1352f2202b6f224afac6
-
SSDEEP
786432:FdFE28ZPxcPZfhFih8KLU2CsGnGjwCxccw6XBc2xb:F+Nq1PXTGUSDfRXb
Behavioral task
behavioral1
Sample
XWorm V5.6.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
XWorm V5.6.exe
-
Size
17.9MB
-
MD5
49f6c848fc3b1f32ed96b08bca221e53
-
SHA1
0c1da68ae22f31f61ded840a42515793e1432a24
-
SHA256
7926286cb142cc3d2511cde859dc78ea4d9a26b5007c80bc33879fc3e5800c0c
-
SHA512
1cb5fea83ccecf175ec1ed6e381bf09f915115458869f05ebdbfbd2a92b6ec41f0a5d004e0bf74a80ccc68491554bb7df95d10242f22ce1429a2bcff124b5ba1
-
SSDEEP
196608:M0gakUV27n9vemQvnDi9BsSqzcB/BAe1d4ihvy85JhhYc3BSL1kehn4inje:MXakUQ7n9vemmmB16ayIhhkRka4i
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-