Resubmissions

26/11/2024, 18:46 UTC

241126-xerrfstpbw 10

26/11/2024, 18:25 UTC

241126-w2kqzstjfv 10

26/11/2024, 17:52 UTC

241126-wfxhnasjg1 10

26/11/2024, 17:10 UTC

241126-vppczazrbt 10

26/11/2024, 17:06 UTC

241126-vmjdyawrbl 10

26/11/2024, 16:26 UTC

241126-txkt3sypey 10

26/11/2024, 16:16 UTC

241126-tqy35avndk 10

05/05/2024, 07:02 UTC

240505-ht3d6sae8s 10

General

  • Target

    XWorm 5.6 Edition Cracked.zip

  • Size

    29.0MB

  • MD5

    b1d76b3b7e7ab22630156d887c7bf437

  • SHA1

    69a5d9bcf0208f3da108c7a53d927b82aba39811

  • SHA256

    52c2a5490cbfa4780940b18d6a288453e9115af91f8c10c4c99dbcf1eeda03e8

  • SHA512

    3aec5911c4f64ef93253edac3cebef83b0c3c827dd8c235a343a4a29402bde2737ebdf62a303f662dd4e6a270d1517c60c7c69a04627f08e99480c7ad1caa612

  • SSDEEP

    786432:LyC3Xp1FGO4HoHhuh4WmhYP0G+733FSxsTQg/E65rNkd/sz:53Xp1FJ4SfbYP0/7HFSxeQgc65rdz

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Detect Xworm Payload 1 IoCs
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Xworm family
  • Unsigned PE 45 IoCs

    Checks for missing Authenticode signature.

Files

  • XWorm 5.6 Edition Cracked.zip
    .zip
  • Background.png
    .png
  • FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Fixer.bat
  • GMap.NET.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • GMap.NET.WindowsForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • GeoIP.dat
  • Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • IconExtractor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Icons/icon (1).ico
  • Icons/icon (10).ico
  • Icons/icon (11).ico
  • Icons/icon (12).ico
  • Icons/icon (13).ico
  • Icons/icon (14).ico
  • Icons/icon (15).ico
  • Icons/icon (16).ico
  • Icons/icon (17).ico
  • Icons/icon (2).ico
  • Icons/icon (3).ico
  • Icons/icon (4).ico
  • Icons/icon (5).ico
  • Icons/icon (6).ico
  • Icons/icon (7).ico
  • Icons/icon (8).ico
  • Icons/icon (9).ico
  • Logs/ErrorLogs.txt
  • NAudio.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Plugins/ActiveWindows.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Chat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Chromium.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Clipboard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Cmstp-Bypass.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/FileManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/FilesSearcher.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/HBrowser.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/HRDP.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/HVNC.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/HVNCMemory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/HiddenApps.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Informations.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Keylogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Maps.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/MessageBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Microphone.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Ngrok-Installer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Options.dll
    .dll .ps1 windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Pastime.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Performance.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/ProcessManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Programs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Ransomware.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Recovery.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Regedit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/RemoteDesktop.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/ReverseProxy.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/RunPE.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/ServiceManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Shell.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/StartupManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/Stealer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/TCPConnections.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/UACBypass.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/VB.NET Compiler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/VoiceChat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/WSound.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/WebCam.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RES/U40957361f7481084776e6aedU9f0U1
  • RES/XWorm.ACT.resources
  • RES/XWorm.About.resources
  • RES/XWorm.Builder.resources
  • RES/XWorm.Chat.resources
  • RES/XWorm.Clipboard.resources
  • RES/XWorm.Clipper.resources
  • RES/XWorm.CustomOpen.resources
  • RES/XWorm.DDosAttack.resources
  • RES/XWorm.EditReg.resources
  • RES/XWorm.FM.resources
  • RES/XWorm.FilesSearcher.resources
  • RES/XWorm.Ftp.resources
  • RES/XWorm.Fun.resources
  • RES/XWorm.HApps.resources
  • RES/XWorm.HBrowser.resources
  • RES/XWorm.HRDP.resources
  • RES/XWorm.HVNC.resources
  • RES/XWorm.Hash.resources
  • RES/XWorm.Hosts.resources
  • RES/XWorm.INFO.resources
  • RES/XWorm.Keylogger.resources
  • RES/XWorm.MBox.resources
  • RES/XWorm.MIC.resources
  • RES/XWorm.Main.resources
  • RES/XWorm.Maps.resources
  • RES/XWorm.Performance.resources
  • RES/XWorm.Port.resources
  • RES/XWorm.ProcessV.resources
  • RES/XWorm.Programs.resources
  • RES/XWorm.Proxy.resources
  • RES/XWorm.Ransomware.resources
  • RES/XWorm.Registry.resources
  • RES/XWorm.RemoteDesktop.resources
  • RES/XWorm.Resources.resources
    .vbs
  • RES/XWorm.RunPE.resources
  • RES/XWorm.ServiceManager.resources
  • RES/XWorm.Shell.resources
  • RES/XWorm.Sound.resources
  • RES/XWorm.StartupManager.resources
  • RES/XWorm.TBotNotify.resources
  • RES/XWorm.TXT.resources
  • RES/XWorm.TcpConnectionForm.resources
  • RES/XWorm.ToolsBox.resources
  • RES/XWorm.VBCode.resources
  • RES/XWorm.VoiceChat.resources
  • RES/XWorm.WebCam.resources
  • RES/XWorm.ngrok.resources
  • SimpleObfuscator.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Sounds/Chat.wav
  • Sounds/Intro.wav
  • XWorm V5.6.exe.config
    .xml
  • Xworm V5.6.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.