Overview

overview

10

Static

static

10

XWorm V5.6...ps.dll

windows11-21h2-x64

1

XWorm V5.6...ns.dll

windows11-21h2-x64

1

XWorm V5.6...er.dll

windows11-21h2-x64

1

XWorm V5.6...ps.dll

windows11-21h2-x64

1

XWorm V5.6...ox.dll

windows11-21h2-x64

1

XWorm V5.6...ne.dll

windows11-21h2-x64

1

XWorm V5.6...er.dll

windows11-21h2-x64

1

XWorm V5.6...ns.dll

windows11-21h2-x64

1

XWorm V5.6...me.dll

windows11-21h2-x64

1

XWorm V5.6...ce.dll

windows11-21h2-x64

1

XWorm V5.6...er.dll

windows11-21h2-x64

1

XWorm V5.6...ms.dll

windows11-21h2-x64

1

XWorm V5.6...re.dll

windows11-21h2-x64

1

XWorm V5.6...ry.dll

windows11-21h2-x64

1

XWorm V5.6...it.dll

windows11-21h2-x64

1

XWorm V5.6...op.dll

windows11-21h2-x64

1

XWorm V5.6...xy.dll

windows11-21h2-x64

1

XWorm V5.6...PE.dll

windows11-21h2-x64

1

XWorm V5.6...er.dll

windows11-21h2-x64

1

XWorm V5.6...ll.dll

windows11-21h2-x64

1

XWorm V5.6...er.dll

windows11-21h2-x64

1

XWorm V5.6...er.dll

windows11-21h2-x64

1

XWorm V5.6...ns.dll

windows11-21h2-x64

1

XWorm V5.6...ss.dll

windows11-21h2-x64

1

XWorm V5.6...er.dll

windows11-21h2-x64

1

XWorm V5.6...at.dll

windows11-21h2-x64

1

XWorm V5.6...nd.dll

windows11-21h2-x64

1

XWorm V5.6...am.dll

windows11-21h2-x64

1

XWorm V5.6...es.vbs

windows11-21h2-x64

1

XWorm V5.6...or.dll

windows11-21h2-x64

1

XWorm V5.6....6.exe

windows11-21h2-x64

1

XWorm V5.6...er.exe

windows11-21h2-x64

7

Resubmissions

23-09-2024 19:46

240923-yg58assfre 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XWorm V5.6.zip

  • Size

    25.2MB

  • Sample

    240923-yg58assfre

  • MD5

    3df07d8344e5800f75f38fdade2aaec0

  • SHA1

    133feffb7e48be2ce194324972d6e0424f2fd52f

  • SHA256

    1836e05f25dddf9426969e13ab80d1dcdf8d7b496b1a05d98ebae9303c18b956

  • SHA512

    38b91983dbc23e6bbb3443045aea54952f93da08ce68aa661583c9522c30a9e22a1c16bf99bfdc6a39a8a4bae353ef12ba978357ab8a3315fde2275bc4ff8579

  • SSDEEP

    393216:Cv6y2gszSnnHTrQWQD59U/p+HZZPz+NJWRL4UPBu+89YWOcC16kh0upLTLrD9dO6:MwSnHTm59UhfJWRbPwYiC1euNrbO6

Score
10/10
stormkittyxwormdiscovery

Malware Config

Targets

    • Target

      XWorm V5.6/Plugins/HiddenApps.dll

    • Size

      45KB

    • MD5

      ba2141a7aefa1a80e2091bf7c2ca72db

    • SHA1

      9047b546ce9c0ea2c36d24a10eb31516a24a047d

    • SHA256

      6a098f5a7f9328b35d73ee232846b13e2d587d47f473cbc9b3f1d74def7086ea

    • SHA512

      91e43620e5717b699e34e658d6af49bba200dcf91ac0c9a0f237ec44666b57117a13bc8674895b7a9cac5a17b2f91cdc3daa5bcc52c43edbabd19bc1ed63038c

    • SSDEEP

      768:aEN0W4dmvWt9VG2LqIvwYGYRpXpWk/x0qqBi3qMG0gpfN3ffiCIT:SdmvWHVGMVwtYRtpl/x5qIXdEdXiCK

    Score
    1/10
    behavioral1

    • Target

      XWorm V5.6/Plugins/Informations.dll

    • Size

      22KB

    • MD5

      67a884eeb9bd025a1ef69c8964b6d86f

    • SHA1

      97e00d3687703b1d7cc0939e45f8232016d009d9

    • SHA256

      cba453460be46cfa705817abbe181f9bf65dca6b6cea1ad31629aa08dbeaf72b

    • SHA512

      52e852021a1639868e61d2bd1e8f14b9c410c16bfca584bf70ae9e71da78829c1cada87d481e55386eec25646f84bb9f3baee3b5009d56bcbb3be4e06ffa0ae7

    • SSDEEP

      384:SCUEeL4D574MvGjydqXwxDJop0n3TmyxhxJNgSg4PbOFsK:SCXeL4DSjydqXwx1FjfNfwr

    Score
    1/10
    behavioral2

    • Target

      XWorm V5.6/Plugins/Keylogger.dll

    • Size

      17KB

    • MD5

      246f7916c4f21e98f22cb86587acb334

    • SHA1

      b898523ed4db6612c79aad49fbd74f71ecdbd461

    • SHA256

      acfe5c3aa2a3bae3437ead42e90044d7eee972ead25c1f7486bea4a23c201d3a

    • SHA512

      1c256ca9b9857e6d393461b55e53175b7b0d88d8f3566fd457f2b3a4f241cb91c9207d54d8b0867ea0abd3577d127835beb13157c3e5df5c2b2b34b3339bd15d

    • SSDEEP

      192:rJV/HNfwK5RSpyv3RIw9RtO1Lnq4Ur1XneDN6IW1Y6Uph1KzaA0UbnnSLWqV:fFl5Rp3RntMO4U5uD8Upml0yhqV

    Score
    1/10
    behavioral3

    • Target

      XWorm V5.6/Plugins/Maps.dll

    • Size

      15KB

    • MD5

      806c3802bfd7a97db07c99a5c2918198

    • SHA1

      088393a9d96f0491e3e1cf6589f612aa5e1df5f8

    • SHA256

      34b532a4d0560e26b0d5b81407befdc2424aacc9ef56e8b13de8ad0f4b3f1ab6

    • SHA512

      ed164822297accd3717b4d8e3927f0c736c060bb7ec5d99d842498b63f74d0400c396575e9fa664ad36ae8d4285cfd91e225423a0c77a612912d66ea9f63356c

    • SSDEEP

      192:E0XOBqmqKYNg/ymxa07XW5U6chariK8GtnNK7gGteb1/C9T6IW14X/bmjIAd2vLV:mBqmqunYL6thaujK4jtepa9BX/bY1h2

    Score
    1/10
    behavioral4

    • Target

      XWorm V5.6/Plugins/MessageBox.dll

    • Size

      14KB

    • MD5

      7db8b7e15194fa60ffed768b6cf948c2

    • SHA1

      3de1b56cc550411c58cd1ad7ba845f3269559b5c

    • SHA256

      bc09b671894c9a36f4eca45dd6fbf958a967acea9e85b66c38a319387b90dd29

    • SHA512

      e7f5430b0d46f133dc9616f9eeae8fb42f07a8a4a18b927dd7497de29451086629dfc5e63c0b2a60a4603d8421c6570967c5dbde498bb480aef353b3ed8e18a1

    • SSDEEP

      384:56lIcAn3tURnUKCvUUVT/95gG3UX/NZSQW9:56lIL3tUSvbVa/NZG

    Score
    1/10
    behavioral5

    • Target

      XWorm V5.6/Plugins/Microphone.dll

    • Size

      540KB

    • MD5

      9c3d90ccf5d47f6eef83542bd08d5aeb

    • SHA1

      0c0aa80c3411f98e8db7a165e39484e8dae424c7

    • SHA256

      612898afdf9120cfef5843f9b136c66ecc3e0bb6f3d1527d0599a11988b7783c

    • SHA512

      0786f802fbd24d4ab79651298a5ba042c275d7d01c6ac2c9b3ca1e4ee952de7676ec8abf68d226b72696e9480bd4d4615077163efbcda7cff6a5f717736cbdfe

    • SSDEEP

      12288:+0OeMv3MrIb8CkZKobg3Wi1bRuSvazv+Uro:ROe+WIb8CkZLbg3Wa8Waz2j

    Score
    1/10
    behavioral6

    • Target

      XWorm V5.6/Plugins/Ngrok-Installer.dll

    • Size

      400KB

    • MD5

      3e19341a940638536b4a7891d5b2b777

    • SHA1

      ca6f5b28e2e54f3f86fd9f45a792a868c82e35b5

    • SHA256

      b574aabf02a65aa3b6f7bfff0a574873ce96429d3f708a10f87bc1f6518f14aa

    • SHA512

      06639892ea4a27c8840872b0de450ae1a0dac61e1dcb64523973c629580323b723c0e9074ff2ddf9a67a8a6d45473432ffc4a1736c0ddc74e054ae13b774f3e2

    • SSDEEP

      12288:Ws6T2x75lFR/RG+BUKPqnwoCMYKIUTJE:WEB+4+1C0IU

    Score
    1/10
    behavioral7

    • Target

      XWorm V5.6/Plugins/Options.dll

    • Size

      30KB

    • MD5

      97193fc4c016c228ae0535772a01051d

    • SHA1

      f2f6d56d468329b1e9a91a3503376e4a6a4d5541

    • SHA256

      5c34aee5196e0f8615b8d1d9017dd710ea28d2b7ac99295d46046d12eea58d78

    • SHA512

      9f6d7da779e8c9d7307f716d4a4453982bb7f090c35947850f13ec3c9472f058fc11e1120a9641326970b9846d3c691e0c2afd430c12e5e8f30abadb5dcf5ed2

    • SSDEEP

      768:ULxkuz7dDWH839iybgkf/sGRNW9S9dhjcI:ULNHqUPbgQsGRNW9S9

    Score
    1/10
    behavioral8

    • Target

      XWorm V5.6/Plugins/Pastime.dll

    • Size

      17KB

    • MD5

      6430ab4458a703fb97be77d6bea74f5b

    • SHA1

      59786b619243d4e00d82b0a3b7e9deb6c71b283c

    • SHA256

      a46787527ac34cd71d96226ddfc0a06370b61e4ad0267105be2aec8d82e984c1

    • SHA512

      7b6cf7a613671826330e7f8daddc4c7c37b4d191cf4938c1f5b0fb7b467b28a23fb56e412dc82192595cfa9d5b552668ef0aaa938c8ae166029a610b246d3ecc

    • SSDEEP

      384:WK9Y5jI8MYODPqeivepi5zOY7//fNCsA8/h5U:WK9YNI8MVDZiWwr/TA8/hC

    Score
    1/10
    behavioral9

    • Target

      XWorm V5.6/Plugins/Performance.dll

    • Size

      16KB

    • MD5

      1841c479da7efd24521579053efcf440

    • SHA1

      0aacfd06c7223b988584a381cb10d6c3f462fc6a

    • SHA256

      043b6a0284468934582819996dbaa70b863ab4caa4f968c81c39a33b2ac81735

    • SHA512

      3005e45728162cc04914e40a3b87a1c6fc7ffde5988d9ff382d388e9de4862899b3390567c6b7d54f0ec02283bf64bcd5529319ca32295c109a7420848fa3487

    • SSDEEP

      384:LtpW2/E3mawGD1XTgOw2QxHN7yVppy6+:JY2ImYRDKHxV

    Score
    1/10
    behavioral10

    • Target

      XWorm V5.6/Plugins/ProcessManager.dll

    • Size

      19KB

    • MD5

      3d4ec14005a25a4cb05b1aa679cf22bf

    • SHA1

      6f4a827d94ad020bc23fbd04b7d8ca2995267094

    • SHA256

      7cf1921a5f8429b2b9e8197de195cfae2353fe0d8cb98e563bdf1e782fe2ee4e

    • SHA512

      0ee72d345d5431c7a6ffc71cf5e37938b93fd346e5a4746f5967f1aa2b69c34ca4ba0d0abd867778d8ca60b56f01e2d7fc5e7cf7c5a39a92015d4df2d68e382e

    • SSDEEP

      384:2dqZXY/oSd1PTQLvLELadRtZa/rnRvDSQUT5S97/Y5bLOEYQfwrpn45rDhUn1kAO:2dqZXWrQPQQtZqrRrlU+cYv1kAvZc

    Score
    1/10
    behavioral11

    • Target

      XWorm V5.6/Plugins/Programs.dll

    • Size

      13KB

    • MD5

      a6734a047b0b57055807a4f33a80d4dd

    • SHA1

      0b3a78b2362b0fd3817770fdc6dd070e3305615c

    • SHA256

      953a8276faa4a18685d09cd9187ed3e409e3cccd7daf34b6097f1eb8d96125a4

    • SHA512

      7292eab25f0e340e78063f32961eff16bb51895ad46cfd09933c0c30e3315129945d111a877a191fc261ad690ad6b02e1f2cabc4ff2fdac962ee272b41dd6dfa

    • SSDEEP

      192:Z3eKcfO/TCOAOG+uCno9SFwN4O4FgkT8zr1P9YD6IW1GX/V3wd0yzSLWVb:8PG/TCXF1SamdnTu5lYTX/NwKyNVb

    Score
    1/10
    behavioral12

    • Target

      XWorm V5.6/Plugins/Ransomware.dll

    • Size

      20KB

    • MD5

      ccc9ea43ead4aa754b91e2039fe0ac1c

    • SHA1

      f382635559045ac1aeb1368d74e6b5c6e98e6a48

    • SHA256

      14c2bbccdabb8408395d636b44b99de4b16db2e6bf35181cb71e7be516d83ad9

    • SHA512

      5d05254ba5cd7b1967a84d5b0e6fd23c54766474fb8660a001bf3d21a3f5c8c20fcdb830fb8659a90da96655e6ee818ceefb6afa610cc853b7fba84bb9db4413

    • SSDEEP

      384:DVSO27QJHvpebFn0LC9Tk7ff2ji+ZMuqI+sHY4k7E7eEDuQZh:DVm7Q1vpebF0LC9TqH2Mj7qtqg

    Score
    1/10
    behavioral13

    • Target

      XWorm V5.6/Plugins/Recovery.dll

    • Size

      1.1MB

    • MD5

      776193701a2ed869b5f1b6e71970a0ac

    • SHA1

      2f973458531aaa283cdc835af4e24f5f709cbad1

    • SHA256

      66dbe3b90371fe58caa957e83c1c1f0acce941a36cf140a0f07e64403dd13303

    • SHA512

      a41f981c861e8d40487a9cd0863f9055165427e10580548e972a47ef47cf3e777aab2df70dc6f464cc3077860e86eda7462e9754f9047a1ecc0ed9721663aeb9

    • SSDEEP

      12288:LaoFeouLUFNFfcaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc5cbc1a:pFetLic805jbibGATp/j5T

    Score
    1/10
    behavioral14

    • Target

      XWorm V5.6/Plugins/Regedit.dll

    • Size

      15KB

    • MD5

      53a2cfe273c311b64cf5eaca62f8c2fd

    • SHA1

      4ec95ec4777a0c5b4acde57a3490e1c139a8f648

    • SHA256

      2f73dc0f3074848575c0408e02079fd32b7497f8816222ae3ce8c63725a62fe6

    • SHA512

      992b37d92157ae70a106a9835de46a4ac156341208cfe7fb0477dc5fc3bc9ddae71b35e2336fc5c181630bac165267b7229f97be436912dfd9526a020d012948

    • SSDEEP

      384:0ZMOBwQbGwAspmewuYvpYr3fgr9A8/VjceZ:0ZMOykGRzYwA8/Vl

    Score
    1/10
    behavioral15

    • Target

      XWorm V5.6/Plugins/RemoteDesktop.dll

    • Size

      18KB

    • MD5

      e6367d31cf5d16b1439b86ae6b7b31c3

    • SHA1

      f52f1e73614f2cec66dab6af862bdcb5d4d9cf35

    • SHA256

      cc52384910cee944ddbcc575a8e0177bfa6b16e3032438b207797164d5c94b34

    • SHA512

      8bc78a9b62f4226be146144684dc7fcd085bcf4d3d0558cb662aacc143d1438b7454e8ac70ca83ebeedc2a0fcea38ad8e77a5d926a85254b5a7d420a5605538a

    • SSDEEP

      384:nKr81F+CoNFZpeg7qX+mK3sxjt9l/C6I5YxBXWKeVFjyJ:KTvZY4gTPXBojG

    Score
    1/10
    behavioral16

    • Target

      XWorm V5.6/Plugins/ReverseProxy.dll

    • Size

      16KB

    • MD5

      a22d11379e413cf832b3943ce46f2463

    • SHA1

      99b9552e8a25bff29678aff828901edbc23eaba5

    • SHA256

      8c4efe2c8702141ffa8ff8f55d248dc4220231ae8d12ecea1f22906a9285b32b

    • SHA512

      cc1eccb29135acd35804b44f73447bd8dedc8ea085dee3670cf49120baa905aa7ca512c14a3f4df6aeb5a70347bd214865f9dc8b709a00abbb0c745164d87074

    • SSDEEP

      384:sNsDP97BkZ3pBkHEk8G1QxFUzTNnrYFXoMZlS9yPCn:sNuR+ZZ+mScWfEoMZQ9yPg

    Score
    1/10
    behavioral17

    • Target

      XWorm V5.6/Plugins/RunPE.dll

    • Size

      11KB

    • MD5

      224be01635cff2dca827fbdeaddb983c

    • SHA1

      11fa00c5e172c9cd1c81acaef52934f785f91374

    • SHA256

      7adfe849345edd76aa975b0647fed2ccaa5f4a6aaf7d55f488af939c0dbef153

    • SHA512

      1a4915b7b21e8166a6ddb6460c77e02c306a460c08fc7ee574832b0576c827db343eda9533959298819ee443790769328ad580fc67fe4817110b63d49248c736

    • SSDEEP

      192:vbfqh94qP9XFw3l+JNGGOueq1JtSnIW1fUse2po7SLOYN:vbChWqPj5jJtGUse2poHYN

    Score
    1/10
    behavioral18

    • Target

      XWorm V5.6/Plugins/ServiceManager.dll

    • Size

      14KB

    • MD5

      2e5f127cb0a69cdd46aa4fd9e603f982

    • SHA1

      994a6ab276c417301ed9208aaaf6719bf9594bc6

    • SHA256

      c552d11db168a4f64db584283a617a6ec51ab6095c20ba4b706c3138beb68a22

    • SHA512

      4455cb3b9d4a9c69abec7180e9a60e16e6be0ae2290f48aa09c5d926370de5512ced4d37b6e6e49515d5f51999211eff6f751c4594db936882fb7f40ee5bf97e

    • SSDEEP

      192:D6FAiNLB2n5QnRBiMcs/XAaICPczrOFsgXTZr106Yq6IW1yShrM7+WAMLuO1Jjm:Ziq5QRBiMn/wpDUtTZ5nYsShY3AgJjm

    Score
    1/10
    behavioral19

    • Target

      XWorm V5.6/Plugins/Shell.dll

    • Size

      14KB

    • MD5

      04609b39e656e297db73be0d02c7e35e

    • SHA1

      f8abd484e7703a4d9629b033e8ec39c82eaf4654

    • SHA256

      6c69b4d45638097e31169d94914e4acb6a8cc7f46788ffa4f241e4c1efb213bb

    • SHA512

      11a88d55497fedeeb05b146ebd3135755aeb08c4596e9379eec83501e734aa6ba926d9bbda1c5f50e361836d65ea88d2c018f0b4b4b668c82ff2163730eaaf27

    • SSDEEP

      192:TDXwH3m0L3G33Kkw720sM76ODzKOFBLggT051i9Yd6IW1OU1YoWPbs5cLWT:oH3m0GqHT76OSUXT0HoYpU1XWoxT

    Score
    1/10
    behavioral20

    • Target

      XWorm V5.6/Plugins/StartupManager.dll

    • Size

      188KB

    • MD5

      3d76ef15ab712b93eabd4b68ea0111d5

    • SHA1

      0f309663fae17c4ccae983e1fabb16a1e5f77d9b

    • SHA256

      1802e16379d96021fee05f583633c8091bb669350b7d32064179a8944d45a5a6

    • SHA512

      6c0d0291abb696bee33b6e42392b07028c82bcffc8fb7934ba234f178f011ab14fde38cdccb322c8dba058ae66fc023349de5db1c587d3417709bf263cfd28f3

    • SSDEEP

      3072:7ITmgSRcBHAt+yM1KlUKEHBAnpK37nXnF8KBOQv174Syoh2sKdm/vl7bQcX1Okta:7MmgSRcBHAt+yM1KlU18g1xNYVc

    Score
    1/10
    behavioral21

    • Target

      XWorm V5.6/Plugins/Stealer.dll

    • Size

      3.3MB

    • MD5

      ade4edd66bc695c9465816fa2538d0cb

    • SHA1

      e4351a2531307c848c60b20ffb50bcc04156fdbc

    • SHA256

      018e06f57725563e4525700edffafb1b062bf5d4b0e9fee498507f0f8200fcdf

    • SHA512

      e2bf3962787366d7a975eb55d2edd1fe35935205febc00f720dc0efff0c62b5df7f0207fd569f692205e8a227c059eea596904995855458e9c02306842e88a6f

    • SSDEEP

      49152:eVbwgxmbsO2B7wKOfpUL6GbriHeGAb4TkyNejjWSqE08:eVbFxmbsO2B7wKOxTSf

    Score
    1/10
    behavioral22

    • Target

      XWorm V5.6/Plugins/TCPConnections.dll

    • Size

      16KB

    • MD5

      9cae90969d14ab4d686c56bae19e041e

    • SHA1

      0359e8eeed993bbbc6f141b115bd533eeb52533d

    • SHA256

      27e17a43478448f64107df786a170753dbd116eafca7c027f6d357f11e6a4def

    • SHA512

      04a9dc16299d866af7f56ff2ef355310d9437c909ec0dd3549d2f142e71149b09822106e254970f00801fe2f0df6b6d2670cf6a8256d85cd35b963c028f6202d

    • SSDEEP

      192:VsFaPxrfOKHEWS3/tQ6v/Lvyrq6gNZOtyEox0GTeA19Z/J6IW1Gz/yyY8RKIxLuM:/9GKkWuv/LyvSwyzTeej/Zz/IHUv

    Score
    1/10
    behavioral23

    • Target

      XWorm V5.6/Plugins/UACBypass.dll

    • Size

      10KB

    • MD5

      158e789d0b6cbc52fcb6653fefca38f9

    • SHA1

      4e913315dc3d69abe2be5e5b3a5d37b5f49f7deb

    • SHA256

      ebd51f1e33673cb8e55f10aa890a04027d62b1c1c0b0ae9b1d6f83f1602f53a2

    • SHA512

      23243daadbad2f68b6ed6720d5792226f9c2aeb0b14cf3bf24ac54dcb7a2aa4aff9d26a5633d3add0d871e4ec65c230752c7c173cc4a4374f9263e2c46f9977a

    • SSDEEP

      192:kcq0WYKDFxDviOGOko8bZfmgyOYkIW1UZ/Xvjljw2ugiSL20V:kntNFxOrE8bLyOYBZ/XTugU0V

    Score
    1/10
    behavioral24

    • Target

      XWorm V5.6/Plugins/VB.NET Compiler.dll

    • Size

      14KB

    • MD5

      2401bee633ea4032a758ffc6d729deac

    • SHA1

      3040e0e27f48eacf45860be4ece6f94db7bc1c4e

    • SHA256

      1940d563046c67dbbeaf5f2a2417aaccdae587c1eb97b79c263994896805bece

    • SHA512

      af016b5d2bf8c08e16b593d72a25284f31d6de7300ef98a226db8ce4f2a9dd512ec793adf0730b40dc0a37e9dc5a9d6ef0a50354a697aa5816b3cbe440655692

    • SSDEEP

      192:TGESp/+S2SoW+O4A083xaU12HeZOCeJyxlTer1c9gotlF6IW1oXxvZLY4cGSLOBL:w3+O4aADifeyTe5agIXxvNccZ

    Score
    1/10
    behavioral25

    • Target

      XWorm V5.6/Plugins/VoiceChat.dll

    • Size

      539KB

    • MD5

      56a8b030ade4736915e5b601a4bf39f8

    • SHA1

      ab03e7948c4604fbd15d285f674ea879082a8e7c

    • SHA256

      1a2da0a66c7771962d525b8fe9491052efbd5f87b97d935c267fd96519b5a35e

    • SHA512

      d0f2990adb10221c88bbe04b4f2b702f99c046ae9ce5e713e2d26f73f9353dfe5fd983cd37c7b712341a58cfc4f833e590ff1e449c66fd5de98604d58a92dbd9

    • SSDEEP

      6144:TkcVpiCslfiJOBvKbfaIKlEZfb78+SmmCENCT/7CbRNid2/c2Co+5CJfSp7Of:4Zjp8fIlE9bg/AgBcRCcp7O

    Score
    1/10
    behavioral26

    • Target

      XWorm V5.6/Plugins/WSound.dll

    • Size

      539KB

    • MD5

      f0d8beccffd6a4831c0712a4da4a0c2d

    • SHA1

      238a2878f1bef8f002ba501c1f65862ed384cc75

    • SHA256

      4bea01b7d691d1f59ca0bb5149e5baf71cde71019da3d352141b1d4921e70bc2

    • SHA512

      1c5244736aa53d5dda52b65a26facda8334bc7f98ce2eb6356c51fcae03b183623d0c3bb7f45993b8bab0c65d261a23164f987aa5f6a47f2f307380567367904

    • SSDEEP

      12288:Ayw8KX3HOt3qqDQkoJBBg3bgtP1TviDH6MJyKwYalFEYU:1w7qDQkocbgttGzTa

    Score
    1/10
    behavioral27

    • Target

      XWorm V5.6/Plugins/WebCam.dll

    • Size

      209KB

    • MD5

      71a9109ccafa90550c1c879a304d27f5

    • SHA1

      c77ce45aaf8b2d8aaaa2a41833275f3eda78046d

    • SHA256

      8d413b40aef41e53557d91f3b3ac64cfc13adb0f8c3edc364e7b8501170e2657

    • SHA512

      fc92190d8a889fb088b2e8c2e4ea4751fcda59eff076b205da7c420b2f26564c1835d6ff1af470b583ec2ec92c0fcfb472e443e29d33f538572e6edd36c8c47e

    • SSDEEP

      3072:pA0VnWR/jKGR5BfF/g50PBgakLA3LC2FY+EdzYZHAx+dqRN51hdJFxtZV9l5hhJz:pBn+22fFcgBgakL320zYZHpMXM/I/

    Score
    1/10
    behavioral28

    • Target

      XWorm V5.6/RES/XWorm.Resources.resources

    • Size

      1.6MB

    • MD5

      34986e38b463873af40f694874c1f6d3

    • SHA1

      8fa89cdb7a394cf8093d548ca9db4652c703ee72

    • SHA256

      557058bd29a5eb55ef073ea9c4dec0baea1fd3f3f4bf2cdd5ee3dfd33735e93a

    • SHA512

      c1b0278e8c21e5c28204f692a5cf5ed16c8ada0c6022d7d38e70905255f3aeb5d2c0fd4549f0ed19ead52aa0ced891a8f9372123bf5e1710be004958750874e4

    • SSDEEP

      49152:OsP2WTJcLsk9Pk6gAK6BN2NQUe+ErnuVqjNhHXH:zuWTGLP9Pk6gAK6n4ldyNh3

    Score
    1/10
    behavioral29

    • Target

      XWorm V5.6/SimpleObfuscator.dll

    • Size

      1.4MB

    • MD5

      9043d712208178c33ba8e942834ce457

    • SHA1

      e0fa5c730bf127a33348f5d2a5673260ae3719d1

    • SHA256

      b7a6eea19188b987dad97b32d774107e9a1beb4f461a654a00197d73f7fad54c

    • SHA512

      dd6fa02ab70c58cde75fd4d4714e0ed0df5d3b18f737c68c93dba40c30376cc93957f8eef69fea86041489546ce4239b35a3b5d639472fd54b80f2f7260c8f65

    • SSDEEP

      24576:FDy7cKOfkiRrXP5WtJvW1mpjSWr7uoZme1V86:+8/AtJes1LJ

    Score
    1/10
    behavioral30

    • Target

      XWorm V5.6/Xworm V5.6.exe

    • Size

      14.9MB

    • MD5

      56ccb739926a725e78a7acf9af52c4bb

    • SHA1

      5b01b90137871c3c8f0d04f510c4d56b23932cbc

    • SHA256

      90f58865f265722ab007abb25074b3fc4916e927402552c6be17ef9afac96405

    • SHA512

      2fee662bc4a1a36ce7328b23f991fa4a383b628839e403d6eb6a9533084b17699a6c939509867a86e803aafef2f9def98fa9305b576dad754aa7f599920c19a1

    • SSDEEP

      196608:P4/BAe1d4ihvy85JhhYc3BSL1kehn4inje:PuyIhhkRka4i

    Score
    1/10
    behavioral31

    • Target

      XWorm V5.6/XwormLoader.exe

    • Size

      576KB

    • MD5

      f1a4c690564f491ad4f7fc8ce79e2fc3

    • SHA1

      cc16274baae2af0c614566d56b693774fe892168

    • SHA256

      0a3555b2ab1f76066c496eb43ebc520c82824a22cfcb714a75c5edc1ad99d88a

    • SHA512

      f7a1116b889493c079000847f5517e9149d5dce703b85b1520ad1d4810c575500aab47460a6e0d7e266fa5ef70ba10d4b625587725251734404913844897e180

    • SSDEEP

      12288:bwl4OwitTdBZpKfSTUNe/RhCEIX7RIiZmWJyGpfxd8KR0F7Br1dfPDWUw+b5/xgo:bwDdtTdBZISTACRhCE+Gi1yG

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

stormkittyxworm
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

discovery
Score
7/10