18b148a082f3a5ac3ad6eda4b80ac5d52fd21abbc582cc98fa571439f79f74f3

Resubmissions

02/09/2024, 10:29

240902-mje84sygrf8

02/09/2024, 10:25

240902-mgakvaxhqq3

Sharing

Copy URL Twitter E-mail

General

Target
XWorm-V5.2-main.zip
Size 752KB
Sample240902-mgakvaxhqq
SHA256 18b148a082f3a5ac3ad6eda4b80ac5d52fd21abbc582cc98fa571439f79f74f3
MD5 ef8e1b2692edf97232c52060c4856dbd
SHA1 617b02ce33b5f315b3400e27a4b2f93bfc1cee11
SHA512 45b35ceb19b01546f698a94910046be71e5cfbd3a05c6ec8eaecde429fc21b339ffb49c53f35d1c415279cc23720dd568b7deaa7164cdd58e3f3d05c146ee3d4
SSDEEP 12288:QY54QNTSfVqVV1lFeudgzTMmPhStGd5IG8Xo3nMuJsVqVV1lFeudgzTMmPhStGdb:Qo4gTSfVqVV1lgudeMkhX7kaMuuVqVV8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  XWorm-V5.2-main.zip
- Size 752KB
- SHA256 18b148a082f3a5ac3ad6eda4b80ac5d52fd21abbc582cc98fa571439f79f74f3
- MD5 ef8e1b2692edf97232c52060c4856dbd
- SHA1 617b02ce33b5f315b3400e27a4b2f93bfc1cee11
- SHA512 45b35ceb19b01546f698a94910046be71e5cfbd3a05c6ec8eaecde429fc21b339ffb49c53f35d1c415279cc23720dd568b7deaa7164cdd58e3f3d05c146ee3d4
- SSDEEP 12288:QY54QNTSfVqVV1lFeudgzTMmPhStGd5IG8Xo3nMuJsVqVV1lFeudgzTMmPhStGdb:Qo4gTSfVqVV1lgudeMkhX7kaMuuVqVV8
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  XWorm-V5.2-main/.github/FUNDING.yml
- Size 14B
- SHA256 a72951e950b845797dc024082c07a2bda667a1920c60e7cf9d63c15502bdb077
- MD5 89d1697a19f57a2ef68e716fc8b3eb46
- SHA1 dbad5da2ac7611a359e7df9c3de092d670b1066e
- SHA512 b74ed84f849231037499ccb878aea1aa43a98e0bb6af19d6f4a9811a4df6f840aa4fd48fa9f47b97de576ece5dedad50113e88dcce879286f5728a4cb9b82f4d
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  XWorm-V5.2-main/.github/workflows/dotnet-desktop.yml
- Size 4KB
- SHA256 48bff6bc181cd2bb605eb9612e39a797a37bad7c6b0ce2f4a298efe45479b85d
- MD5 1171aaf2b4fd34abd3a6cc3bce95b186
- SHA1 31ce2c75c2666dd9fea8c34e0ad6193619c92c67
- SHA512 b249f9db1e23531b8f70000221122d0f6dee41de3bfaabbd74ed4e81961c0ec5186611cc649730ad2fbc4bf7bb9cfe671a47a6909acd8ac3203963e36b73259b
- SSDEEP 96:SFGxUmwAjJoYe9RsBiJjZP2RsBXfzGwRK52OARsus7SsRvO6+w0zt:L6GjmYQvJjZe+fHRKoFeO6v0zt
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral5 behavioral6
- Target
  XWorm-V5.2-main/.github/workflows/main.yml
- Size 1KB
- SHA256 ecfae89aac6d8991ea4664f7f4ab2ff4fd0a7de5c43cd1b7903cc0c5f962b212
- MD5 77ad2a4f9590480d8bccb976a3285ecd
- SHA1 a0d7a77feb9d570df41465408cf2b280db1db646
- SHA512 69d51c2ec1638bf39f525bbc31cd3415c4850e65fc561c65515722fbcb7b39d922e21348c1f51f72ba3188a96276059a185f65f801515f2536dfbec93e6e8c6a
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  XWorm-V5.2-main/LICENSE
- Size 1KB
- SHA256 0c44a1857f590e107bc133a56cbc98f21ed557bc208c2c76aff2341a03f29208
- MD5 a61ede01e0aca9b2e405c149fceaf76f
- SHA1 a182dcfd310f0065c847a69631d601da74587168
- SHA512 d304b0ba467d9379cc33ef80a4c3a5fc3f76d049c0dfe83782173379928802a193bb07eef7b97f1d4a503076215056a7f29857dc237950d7fe64fc8370b93c7e
- MD5 SHA1 SHA512
Score

1^/10
behavioral10 behavioral9
- Target
  XWorm-V5.2-main/LOG
- Size 25B
- SHA256 8b8b6d0fb054c86d36bc2e3c4cd28c2925f7ccf957d041e5056492fa385fdb9d
- MD5 2a099aa2fb83518822653035f4a0d033
- SHA1 ea8e86a3102b54965dd7ebe21ccdbaf4b1007cda
- SHA512 39fe7409732ac27bf1eaeefd3f945e0bfa103b5aee5ab51e5ee5ac3c32f7920de1499377ce042e044928773111a1ca1f8a80b887802639fb71a4cb295a279ea3
- MD5 SHA1 SHA512
Score

1^/10
behavioral11 behavioral12
- Target
  XWorm-V5.2-main/README.md
- Size 10KB
- SHA256 768b4a3ebf2b55439853fee5ebd8d11a02645ecf43f05a1759b60f29a22f1f8b
- MD5 0ae0f47200074d6ecf4765322d22bf14
- SHA1 fc9f9d2acb4b82e447cd01a350ce7f897e89f883
- SHA512 fb991db93baa2cf3db095b0ae275bc183841b490734419f8b7baaf394e7d323a2b0e5487d1930e58a4d62d97ec403f2c1caa1a8687b3d93ce561b24d36635ae7
- SSDEEP 192:nRdQAWTpbpri9ua5/d59JQQsCUZ30a+KHfFzGtOh:RdcFbpi9J96Tx0a+aFGU
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  XWorm-V5.2-main/XWorm V5.2 SRC/Algorithm/Aes256.cs
- Size 6KB
- SHA256 ff4f6ce714aab58325cd95470b9652e8f15bfe65c1eedc0c19ab78040433e0eb
- MD5 a5e601caf81b0adf630a5a5743c051d8
- SHA1 5ad612177b61a7225d389368bc3009ac2970e278
- SHA512 2c670ec60be8cc84e6266b1454b04b0212884b8cafc786dfc8bbec8397c4647eccc887805b3606d90f9d0c40e3979de4934992ac6e48fe4fc498b863c9cbe421
- SSDEEP 192:iDhdbgH7pMi9Z6g6XAy0EOpORkxqy9gpdOH6g6XAy0h9/kB/IkyiS6hXKyY:i6uvLsG/Xh0
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral15 behavioral16
- Target
  XWorm-V5.2-main/XWorm V5.2 SRC/Algorithm/Sha256.cs
- Size 806B
- SHA256 0f010b1c04067a1a14b3039c6d0d54bca21affe3d83d90d8139d04a3ae0f3c61
- MD5 9b16ba70ff176f6ce7335e7205e32b2b
- SHA1 9baf249db737d3fc4fec3cc6bae80f6e2b0c487f
- SHA512 9e5ecfe36cc439818eab2f5700898bdc0d5179aa4dbc4d6234096e43834272ad9527ea270f0f81531aa4a9d253ba22d154a2db6ee323684d02f199a9bae4cab3
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  XWorm-V5.2-main/XWorm V5.2 SRC/Edit.cs
- Size 6KB
- SHA256 4c0729290757e8173e1b3f78edbb139e6cd528c006ca2042d58e1bfcf0e56334
- MD5 5884aa60ed6256abaeb4c1b77169259a
- SHA1 1ef4e629d8fa47f3b964ce0c18164db7abe959c2
- SHA512 dfb121997da65dc7787cec0c7453db6a4233c0e792c51e4370c2050fb58f3c59ed3f6b24d11ef51131792607bfe4ceff87204cdcec29900a6f45098fe110ccac
- SSDEEP 96:JFk4u6zhDiL/kSwWiAAx2dHvV2yhTBblVAId9TFQVyWLXSJDo:7lQQS3vV2ypBxVAIdtFuCK
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral19 behavioral20
- Target
  XWorm-V5.2-main/XWorm V5.2 SRC/Edit.resx
- Size 5KB
- SHA256 4d3ee9059f5b98ab1806f6916ebea2a8c56023f8c63ddfd80b7378d27d1aa0f6
- MD5 96ba0a444d087ae06f32319ca4f0a3e4
- SHA1 e3e08973b3d47c1ad51ccb133315b6242e275f0f
- SHA512 571d4083c76428d8c3914b2bc1281cc79ed4603b5fe0e3e82ee58dad488fcfe7f797a45b0ea7f14841a2a100656f059c186b7338ce33beb910cdddbf9ee70cbb
- SSDEEP 96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUt:Zf+tLPfYnLvFVOiFQaUD7Ut
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  XWorm-V5.2-main/XWorm V5.2 SRC/Form1.resx
- Size 5KB
- SHA256 4de5f9b8f888d7d2693c990b460aab570e7f8a88b0a54cea1e5f81b000319f8b
- MD5 0463513162002a69b7c1b7189d785af3
- SHA1 049f59541fa3fdd29a2766bfd3e0af9f555faa8c
- SHA512 e26f8887074c72af13d9603996ec5419da718b95babd2756de2f219560e18a90340cab7b8961cf9cae6a5317eb55e0faa1a7db33e9046ea591bb4619aab65e76
- SSDEEP 96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUS:Zf+tLPfYnLvFVOiFQaUD7UCbawybawg
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  XWorm-V5.2-main/XWorm V5.2 SRC/IconLib.dll
- Size 56KB
- SHA256 613482c49e24b750382de7fae0940c7cc66072eb32835a575509a995d5b19bb7
- MD5 e0f9727bce92fb3d84ddbd00bd8f864b
- SHA1 676dae618eef96057fa773673f8e25b4ecfd68fc
- SHA512 935f57c9d287875e8f384cd8797005fd271f63e4129a2c7383b31031cb89861807f24f08cfe449fd05fabc1ed610eafacba1042d22580484dbe31ad177f5a140
- SSDEEP 1536:NfZi6CyBOQbqSKTAtHyYB6Bulg36liiGpfp:mpQestHyGjy36Gpfp
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  XWorm-V5.2-main/XWorm V5.2 SRC/Packet.cs
- Size 3KB
- SHA256 eb3825235db1f955354b10d06c585b41a87756005b4d32e1c7fc8e4a45519716
- MD5 fa743703a2086b9384a91e6294c216ea
- SHA1 4891bdc752100024ba9cb5e0b2208c8d54f970d1
- SHA512 1b6008d6b6debc9d9b314ef391fa6845f69013408ee12934c78bbf964e49a4fe7ee4323af9ce2a6cd75134d60d6b4ace626acde86465256fda9cd678df2f0b78
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral27 behavioral28
- Target
  XWorm-V5.2-main/XWorm V5.2 SRC/Properties/Resources.Designer.cs
- Size 2KB
- SHA256 052d90266d70ef55b3fb50c757619fe9ad3ae2ec025f5bba154904510900a0d0
- MD5 ea68298204563cd3b55f31771e456f7b
- SHA1 02f7d041bc920483814536a86190817934c26514
- SHA512 2a89cae8ec089cd3b4f47678d5e2923c04af1891d79c2035f55d35af950dbacad9b89acc1f4621543418365d0efd1ec992090b803b2d5833ecc3e63f48dec121
- MD5 SHA1 SHA512
Score

1^/10
behavioral29 behavioral30
- Target
  XWorm-V5.2-main/XWorm V5.2 SRC/Properties/Resources.resx
- Size 4KB
- SHA256 4c707be3a8165ed7ce5273a3075e8ac550a1a2cdceb456ad8926c0a482739706
- MD5 b0bb3d9263454532df5b3b8668dfec66
- SHA1 09c313fd3e5c6453d2ebc424f8275de78a5e56a3
- SHA512 0db1c06b271737b4639d8f716471ca51f8f036bad55c23a26f9a0f9a0f76d0aec680e8a00e717ebbfc66374c565b285949bdbdf957189cec5c4650c82faa72d7
- SSDEEP 96:pyADa92LPXN+Lv69kZ8fEzflxH2fpsfDdC9TOvD5YSYoeSboXc:UArLPkLvlWEhQaU9TtJoeWoM
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32