Overview

overview

10

Static

static

1

XWorm V5.0 .7z

windows10-2004-x64

10

Resubmissions

16/05/2025, 19:34

250516-x98cpafp7t7

17/08/2024, 16:20

240817-ttbf8svdla10

17/08/2024, 16:11

240817-tm6zkavarg10

Sharing

Copy URL Twitter E-mail

General

  • Target
    XWorm V5.0 .7z
  • Size 27.5MB
  • Sample240817-ttbf8svdla
  • SHA256 02a3e64c747a11a6cf9cef01a84509ed228db9e18fb4931dc010c6f3ea5009d4
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
agentteslaagilenetdiscoverykeyloggerspywarestealertrojan

Malware Config

Targets

    • Target
      XWorm V5.0 .7z
    • Size 27.5MB
    • SHA256 02a3e64c747a11a6cf9cef01a84509ed228db9e18fb4931dc010c6f3ea5009d4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    agentteslaagilenetdiscoverykeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • AgentTesla payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks