Overview

overview

10

Static

static

10

XWorm/XWor...db.dll

windows11-21h2-x64

1

XWorm/XWor...db.dll

windows11-21h2-x64

1

XWorm/XWor...ks.dll

windows11-21h2-x64

1

XWorm/XWor...il.dll

windows11-21h2-x64

1

XWorm/XWor...ts.dll

windows11-21h2-x64

1

XWorm/XWor...re.dll

windows11-21h2-x64

1

XWorm/XWor...rs.dll

windows11-21h2-x64

1

XWorm/XWor...ed.dll

windows11-21h2-x64

1

XWorm/XWor...ls.dll

windows11-21h2-x64

1

XWorm/XWor...io.dll

windows11-21h2-x64

1

XWorm/XWor...on.dll

windows11-21h2-x64

1

XWorm/XWor...ws.dll

windows11-21h2-x64

1

XWorm/XWor...ne.dll

windows11-21h2-x64

1

XWorm/XWor...at.dll

windows11-21h2-x64

1

XWorm/XWor...rd.dll

windows11-21h2-x64

1

XWorm/XWor...ss.dll

windows11-21h2-x64

1

XWorm/XWor...er.dll

windows11-21h2-x64

1

XWorm/XWor...er.dll

windows11-21h2-x64

1

XWorm/XWor...DP.dll

windows11-21h2-x64

1

XWorm/XWor...NC.dll

windows11-21h2-x64

1

XWorm/XWor...ry.dll

windows11-21h2-x64

1

XWorm/XWor...ns.dll

windows11-21h2-x64

1

XWorm/XWor...er.dll

windows11-21h2-x64

1

XWorm/XWor...ps.dll

windows11-21h2-x64

1

XWorm/XWor...ox.dll

windows11-21h2-x64

1

XWorm/XWor...ne.dll

windows11-21h2-x64

1

XWorm/XWor...sk.dll

windows11-21h2-x64

1

XWorm/XWor...ns.dll

windows11-21h2-x64

1

XWorm/XWor...me.dll

windows11-21h2-x64

1

XWorm/XWor...ce.dll

windows11-21h2-x64

1

XWorm/XWor...er.dll

windows11-21h2-x64

1

XWorm/XWor...ms.dll

windows11-21h2-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XWorm.rar

  • Size

    59.1MB

  • Sample

    241129-l8cnvazldx

  • MD5

    6ec728dd292a8e1f39cd6baea415ff66

  • SHA1

    e1103f0af9d27f5c56667d98a36dd40ab5ec8392

  • SHA256

    c03c2ec5ef0958a61a913e2bfb80a420a030f579858cc203b3d2bc3b938400cd

  • SHA512

    ffc584bfb586e7c123f5e7c153fd9e9187e7010e7b4bce9ae590c05961bbbfa46b4c2f25ded830626e30aea919cec31f7026ccf699510f8cccb1921507829a40

  • SSDEEP

    1572864:c3UGEBh79oS6ea3nG8zWxYKClanZV79oS6eaqAHRvr:QEBhxb6eaxixDnZVxb6eaFJ

Score
10/10
stormkittyagilenet

Malware Config

Targets

    • Target

      XWorm/XWorm V5.1/Mono.Cecil.Mdb.dll

    • Size

      42KB

    • MD5

      1c6aca0f1b1fa1661fc1e43c79334f7c

    • SHA1

      ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d

    • SHA256

      411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b

    • SHA512

      1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76

    • SSDEEP

      768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS

    Score
    1/10
    behavioral1

    • Target

      XWorm/XWorm V5.1/Mono.Cecil.Pdb.dll

    • Size

      87KB

    • MD5

      6d5eb860c2be5dbeb470e7d3f3e7dda4

    • SHA1

      80c76660b87c52127b1a7da48e27700f75362041

    • SHA256

      447ede1984bb4acd73bd97c0ec57a11c079cee8301c91fb199ca98c1906d3cc4

    • SHA512

      64cf4fe7de68a35720d2b9338ba9cf182e127d95d72d2ccf7ff5c73a368133663e70c988a460825fa87b2d03717a4447948d5262f56aceb7c3bf1cb3ab5a41a5

    • SSDEEP

      1536:2OCAsdBo+am5OMwr5IlALYKXgAJGsZhTjrjvjCXeO:ZCjta0OMuIlArVJGqT/jveXeO

    Score
    1/10
    behavioral2

    • Target

      XWorm/XWorm V5.1/Mono.Cecil.Rocks.dll

    • Size

      27KB

    • MD5

      6e7f0f4fff6c49e3f66127c23b7f1a53

    • SHA1

      14a529f8c7ee9f002d1e93dcf8ff158ab74c7e1a

    • SHA256

      2e2623319bdc362974a78ea4a43f4893011ec257884d24267f4594142fcd436e

    • SHA512

      0c773da6717dd6919cd6241d3cee26ab00bb61ea2dbeff24844a067af4c87ff5cbdb2fe3ada5db4707cee921b3fb353bd12ee22b8490597d4f67ad39bace235e

    • SSDEEP

      384:70ve8JOuJ5iC7n2NwxEXCni+VXcMeDz8PmR1ugLoaeuLMBG9UphJAprjE3uFLHa9:7+m4iCyrXOhG8uRssveum1pMFLHFBvd

    Score
    1/10
    behavioral3

    • Target

      XWorm/XWorm V5.1/Mono.Cecil.dll

    • Size

      350KB

    • MD5

      de69bb29d6a9dfb615a90df3580d63b1

    • SHA1

      74446b4dcc146ce61e5216bf7efac186adf7849b

    • SHA256

      f66f97866433e688acc3e4cd1e6ef14505f81df6b26dd6215e376767f6f954bc

    • SHA512

      6e96a510966a4acbca900773d4409720b0771fede37f24431bf0d8b9c611eaa152ba05ee588bb17f796d7b8caaccc10534e7cc1c907c28ddfa54ac4ce3952015

    • SSDEEP

      6144:jIevdbLPNYe8bikm98KXPHhOWY/fFREomhUFD3z:se1PNL+QRfBg/f/EWFD

    Score
    1/10
    behavioral4

    • Target

      XWorm/XWorm V5.1/MonoMod.Backports.dll

    • Size

      138KB

    • MD5

      dd43356f07fc0ce082db4e2f102747a2

    • SHA1

      aa0782732e2d60fa668b0aadbf3447ef70b6a619

    • SHA256

      e375b83a3e242212a2ed9478e1f0b8383c1bf1fdfab5a1cf766df740b631afd6

    • SHA512

      284d64b99931ed1f2e839a7b19ee8389eefaf6c72bac556468a01f3eb17000252613c01dbae88923e9a02f3c84bcab02296659648fad727123f63d0ac38d258e

    • SSDEEP

      3072:kRu+JWxtm5UE1cy/4HJW/SwUif9T2FpsP3Y+RJgv:kRTJWfNE1CuSMlTIeTRm

    Score
    1/10
    behavioral5

    • Target

      XWorm/XWorm V5.1/MonoMod.Core.dll

    • Size

      216KB

    • MD5

      b808181453b17f3fc1ab153bf11be197

    • SHA1

      bce86080b7eb76783940d1ff277e2b46f231efe9

    • SHA256

      da00cdfab411f8f535f17258981ec51d1af9b0bfcee3a360cbd0cb6f692dbcdd

    • SHA512

      a2d941c6e69972f99707ade5c5325eb50b0ec4c5abf6a189eb11a46606fed8076be44c839d83cf310b67e66471e0ea3f6597857a8e2c7e2a7ad6de60c314f7d3

    • SSDEEP

      6144:mV+Fj3NL3NdYIRTdJ3AdHwSOTboZK3MYt:hFj3NL3NdYIRTdJ3AdHp2

    Score
    1/10
    behavioral6

    • Target

      XWorm/XWorm V5.1/MonoMod.ILHelpers.dll

    • Size

      6KB

    • MD5

      6512e89e0cb92514ef24be43f0bf4500

    • SHA1

      a039c51f89656d9d5c584f063b2b675a9ff44b8e

    • SHA256

      1411e4858412ded195f0e65544a4ec8e8249118b76375050a35c076940826cd0

    • SHA512

      9ffb2ff050cce82dbfbbb0e85ab5f976fcd81086b3d8695502c5221c23d14080f0e494a33e0092b4feb2eda12e2130a2f02df3125733c2f5ec31356e92dea00b

    • SSDEEP

      96:XC5172VL9HZNBrfq7LgcA6S8I2DqDXGnADX62WuauAuRt/0:q8xDfYLgcAMtAXG+rPVL/

    Score
    1/10
    behavioral7

    • Target

      XWorm/XWorm V5.1/MonoMod.Iced.dll

    • Size

      623KB

    • MD5

      c24584c6b5bc57ac46727ab15e332c4a

    • SHA1

      dadd68f0fa45845fbc30fd0f8f54e8616cdd2d0b

    • SHA256

      ef4a8f28226db390dd07de13afc01c8000e127c978ebf428a6637f39ac277033

    • SHA512

      aabc699eef08e3483049c7ceb48842deddc52284de7f6f72d56d6eccac3989cc373839aeac61f03e7b2af203744d579fd96a4eb911cfdd0461b151c41dc6771d

    • SSDEEP

      6144:Xw98C3SQzlfuStslPYAH+jUmLdf26bfDcj2511Qxu7F:q8CCYlfuGslPn+jvDTDcj251+xuR

    Score
    1/10
    behavioral8

    • Target

      XWorm/XWorm V5.1/MonoMod.Utils.dll

    • Size

      319KB

    • MD5

      79f1c4c312fdbb9258c2cdde3772271f

    • SHA1

      a143434883e4ef2c0190407602b030f5c4fdf96f

    • SHA256

      f22a4fa1e8b1b70286ecf07effb15d2184454fa88325ce4c0f31ffadb4bef50a

    • SHA512

      b28ed3c063ae3a15cd52e625a860bbb65f6cd38ccad458657a163cd927c74ebf498fb12f1e578e869bcea00c6cd3f47ede10866e34a48c133c5ac26b902ae5d9

    • SSDEEP

      6144:9gPf7SkKpBmBEKFutWL7dyywUQ1MWWavAsXjb:q7Svp8EtO49N

    Score
    1/10
    behavioral9

    • Target

      XWorm/XWorm V5.1/NAudio.dll

    • Size

      502KB

    • MD5

      3b87d1363a45ce9368e9baec32c69466

    • SHA1

      70a9f4df01d17060ec17df9528fca7026cc42935

    • SHA256

      81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451

    • SHA512

      1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7

    • SSDEEP

      6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS

    Score
    1/10
    behavioral10

    • Target

      XWorm/XWorm V5.1/Newtonsoft.Json.dll

    • Size

      695KB

    • MD5

      195ffb7167db3219b217c4fd439eedd6

    • SHA1

      1e76e6099570ede620b76ed47cf8d03a936d49f8

    • SHA256

      e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d

    • SHA512

      56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac

    • SSDEEP

      12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/

    Score
    1/10
    behavioral11

    • Target

      XWorm/XWorm V5.1/Plugins/ActiveWindows.dll

    • Size

      14KB

    • MD5

      a89dd74272c4221a3921b8f34918c086

    • SHA1

      101d496a80a3f32308c85328898747ba1f67bd18

    • SHA256

      32ac14f117af3a2973e0303d9da754888f23f6ff1730897f47b4f93d000ce75b

    • SHA512

      026be43a25f3f1afeaa44420954db22e0841177ab02bece816f25a921e47dd0c1a049ca0d44c3fc0e57ee3a049dc7452611e5c85f0fea962529415220b2b3264

    • SSDEEP

      192:FpsFElxHxzCXorWcsvaUJwfdBuo1I5+3gqT8AO1tW9Yr6IW1GXZ3+eY7EDmSLOb:0FELRzbrUw/AodT8ptsY7XZ34ED8b

    Score
    1/10
    behavioral12

    • Target

      XWorm/XWorm V5.1/Plugins/All-In-One.dll

    • Size

      4.8MB

    • MD5

      e5cb40383701b4ebd098176c513936bc

    • SHA1

      ac263e44faaeffe28859dfb9c95aa969107d2a7a

    • SHA256

      0dca9d815f8ea9aff7ca121071424914fa830c31369a93804a63e44078274f95

    • SHA512

      cb161d3484fbb2247b907216e3d556a8545b0070dddbf294537d84b03b3e8503dae75f2cbce7e7cec03673085b46188ec108647e2c4e44627bb4ca4f489c6b03

    • SSDEEP

      98304:1l19F9QORkChiDC9OtH7c2iwGxIvPBOw0JefVfQ2a5cFd4KssODtd:l9FPRkC8C9OH7c2ilInz0kfVo26Wsd

    Score
    1/10
    behavioral13

    • Target

      XWorm/XWorm V5.1/Plugins/Chat.dll

    • Size

      18KB

    • MD5

      a60e5d4390b1f8c6f94b255481ad7f51

    • SHA1

      0fd7e0cea1ba811a31be8aaac803dd107e4caec4

    • SHA256

      3ef58d9a1d148af6c379b9ffe7d090268ed6a042ce640ea59803be8caf6cb1a3

    • SHA512

      6d3ed8afdabea1b43b6ecb2ed0beeff27f34123619ab688967fbe1f28971eea85612aba0baaad9bfe3c9b156d2b6c3f4f56ed4a08901b089f34cb103c440c11e

    • SSDEEP

      384:BUeRbCtl+SLFxdQ0C7sKmsfcrwTKvh6GIKoIefWUWmf9:s4SpxaoKmJr0pIefWXO

    Score
    1/10
    behavioral14

    • Target

      XWorm/XWorm V5.1/Plugins/Clipboard.dll

    • Size

      14KB

    • MD5

      e2e2246f73a7ea4cf79e9cd5cafec405

    • SHA1

      d97595d61f49c86bdf3b63707af27d8dd7103afd

    • SHA256

      51c9a0c4c741d0a0439b7f7b0930325c1e43a0fa78fec21244ded9e3e2400299

    • SHA512

      b09b1898799b3425fa3a1395977a68b19f193927a3a1db56d4302944373b635498fc7b34a60492dd78545c565c6765a282685fec332052591563298bd1972624

    • SSDEEP

      192:s+e2PZKYnw/LzXsJ0zzBa70OFXgNTer149iY6IW1mX/60VCCWk7RSLWMU:82ZE3sJ0ha70USTe5Wi2X/6SjMU

    Score
    1/10
    behavioral15

    • Target

      XWorm/XWorm V5.1/Plugins/Cmstp-Bypass.dll

    • Size

      11KB

    • MD5

      cf15259e22b58a0dfd1156ab71cbd690

    • SHA1

      3614f4e469d28d6e65471099e2d45c8e28a7a49e

    • SHA256

      fa420fd3d1a5a2bb813ef8e6063480099f19091e8fa1b3389004c1ac559e806b

    • SHA512

      7302a424ed62ec20be85282ff545a4ca9e1aecfe20c45630b294c1ae72732465d8298537ee923d9e288ae0c48328e52ad8a1a503e549f8f8737fabe2e6e9ad38

    • SSDEEP

      192:KpXpS1QWlPkiqdE7FNNGGO9mWbpGkjgyaYcIW1vr/8TNU7aL7YiLsO08hdW5:Kp5IfL0mWbEkUyaYir/oNJL7KQ

    Score
    1/10
    behavioral16

    • Target

      XWorm/XWorm V5.1/Plugins/FileManager.dll

    • Size

      679KB

    • MD5

      5a88ad1ebd121a9eb4a520cf97ca6fc8

    • SHA1

      72e88df92a996ec55ed7dc815fc208fae160e5ba

    • SHA256

      7e9a443f43bd92777ac7e4fca8f6b44e7a9912835dd022aaa68c6dd9c70ec7aa

    • SHA512

      b07a55513e0be20efbecf583f0d22d2b6051ae7890af95dc65ff84b582f8c806aeff930d6295a68d6e6a8bf310e047990915c84e0f92dd2437a23ee2290776f7

    • SSDEEP

      12288:B9wCuLvFdA0uuBK69dN0RpNBgucQDdnGtNVcwlT:HOLvFdA0uuBK69D07NBrcQDdnGtNV

    Score
    1/10
    behavioral17

    • Target

      XWorm/XWorm V5.1/Plugins/FileSeacher.dll

    • Size

      478KB

    • MD5

      ddd4ae137e023e293477e0f52a982ee4

    • SHA1

      2decefb69bcfb8306c519ff98c0277bbca8fd40f

    • SHA256

      c1bb7f89e10f3e4214b8213e728e6bf5bee8d5dfe66aa304f1396fe6afa2f933

    • SHA512

      a1ec9d3ebfe4dae3ba7b2e744cfbe546bfabc15795ba9c3c9624da2b7c4564244c3570d202964137ac1239e038d2f999976dfc0ad359808a285e661e6946dfc0

    • SSDEEP

      6144:+88L5lWTUVRTw/l97teGtSV41QJDsTDDh0Yhe6dwxLV/tuhgpn5vWRBI+WR:3zTUVRTw1lS4Ys50ie6Cf4gpys

    Score
    1/10
    behavioral18

    • Target

      XWorm/XWorm V5.1/Plugins/HRDP.dll

    • Size

      1.7MB

    • MD5

      5dd14343d120def51a8504a35c83f5b9

    • SHA1

      1458b2629901200bf4b6fe6b6258ebcca083404b

    • SHA256

      06112658d3f250bdc136fbfce07c9b93772aa3aadbde9893a34e9f5962121445

    • SHA512

      7230dd19eeece4aba9c5b97cfa273d6f9957c9b59ae2e60bb0811b4ae0fc82597fe64039c1ea7dae8bf9b8d81732022b96153cd9ecd8ae5ff2359b2ff1f8722b

    • SSDEEP

      24576:qdKrKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:qdLHZ5pdqYH8ia6GcKuR7

    Score
    1/10
    behavioral19

    • Target

      XWorm/XWorm V5.1/Plugins/HVNC.dll

    • Size

      58KB

    • MD5

      f385b6b4bb2600a95d152564151efa5f

    • SHA1

      b70ba4324df9d39ec686e38eb135a515bc4499c8

    • SHA256

      77edb581f60e4e04ff0c997c28b57f6fa93416e7a87d0f0daaae302866b78d35

    • SHA512

      af55e3eb48b6142ae978999226ecfe996ddd6158e220a2e0b0e0c1f312d29486640f62e827d75bf1352374b1d2a3dea7bb9141380f46c653e2ced96ea5d3a561

    • SSDEEP

      1536:DK1+hYeRT6z12BWR7fE3XZll/72NGaM2fDP:o+hYekz12BWR70Ckab7P

    Score
    1/10
    behavioral20

    • Target

      XWorm/XWorm V5.1/Plugins/HVNCMemory.dll

    • Size

      39KB

    • MD5

      54c2cf58d766d76041b2faae9a9731c6

    • SHA1

      40a26c8939ec691ec88c6d4daaedf2ad8b2f5180

    • SHA256

      f0a6502e7fe2a9d4faf5a949c16e1504855a0827e502536aa84f5d6420acc78b

    • SHA512

      b4097a7ed2de31d058c83f5731fb044a2883e20dbe3eb1f304c5b208891afd4e7efc1621d8a87c4eb30d898b4bad372bd3cea17105cf5c07f371141fe7704d5f

    • SSDEEP

      768:WG3XmmD4SlQ0gfI1OL/6zA+d8HK9eQzy8UmhbJ:WgXbXi0pOL/yN1deA

    Score
    1/10
    behavioral21

    • Target

      XWorm/XWorm V5.1/Plugins/Informations.dll

    • Size

      22KB

    • MD5

      5077fb4a8a1589495a5dd47a79156386

    • SHA1

      bbb9cc2a9296826558bee9a69ba86be7c8462a01

    • SHA256

      ad562a4c86ae13abc80a6cf22e88f50d4dede6d2ab3407aee849de3364d97dcf

    • SHA512

      253784f927c217152abd1c43203f7b3930066a36f2fd39919020e0088419ac763faa3dd9ba42d6660924eee06b8c796cb25f39eec637847b60524a56c570fc82

    • SSDEEP

      384:O4svJAz5thUNHcxxypeGQ/0n3TmyxhxJNSLSg4TjjoZ:O4suz/LypeGQEjfNSuM

    Score
    1/10
    behavioral22

    • Target

      XWorm/XWorm V5.1/Plugins/Keylogger.dll

    • Size

      17KB

    • MD5

      166492ce61f59c317dcae6a97d49638c

    • SHA1

      65da1bb702948b683dc793d010dbce15d25aa5c7

    • SHA256

      cc2aca257b7d11a62ba7430b4f674e20cfed8331a97012bee84508ff98939063

    • SHA512

      bbb7bb161ce6b29c16121c3f375865bce71115105d98f63b8ab4fb39a438acaaf70fd6e2521e6b103df02e2f8cc98b11e4b38a91a238dd3c0140fc204c2e45f9

    • SSDEEP

      192:cCK9HKDyS0+NKdUxEIj1aq8fgYO1Lnq4Ur1XneDN6IW1Y6Up91KuN10UbnnSL2CV:s5Oe+4dw1IDMO4U5uD8Upic0yZCV

    Score
    1/10
    behavioral23

    • Target

      XWorm/XWorm V5.1/Plugins/Maps.dll

    • Size

      15KB

    • MD5

      5ec706bfff0e4bc22fa9552408e5a181

    • SHA1

      8eeba1eac636a559758b6fd397dac3936312d37e

    • SHA256

      0457038beecb7be4097d59398ad70d2e671aab750c5bef43483630f5460bacd5

    • SHA512

      b7598309c4571a87ea8b732d7607a728bbb42f53f0c7ed1922203478c9b5c08580fa192d130a7662d5c25ebaf5e6c0ae360e53edade76d013a97ff549b775640

    • SSDEEP

      384:lHC+Q4WPRdJElcjp8J4jtepa9BX/bR9E2:lHCbRdWle2C5x/d6

    Score
    1/10
    behavioral24

    • Target

      XWorm/XWorm V5.1/Plugins/MessageBox.dll

    • Size

      15KB

    • MD5

      40645f332ebc92fefb0ebf65c6a2aa48

    • SHA1

      7d9e638759c741f076b64a4c8f928a64baef84d0

    • SHA256

      babb99baa79865e753f832050663cf54cee5f042818972396e2dbc4c651d8e6a

    • SHA512

      b8b4107e21de6641fc34cbf4baa02fc76e7f5e759a46da00cfa135a3d99f54c46b688a60e1d81d574763781b34658b95d84703a57a004434bb5c569fa8a55b68

    • SSDEEP

      192:TpDQ4tBCjRD6W2Y7gF/OF2glT/9r169G3m6IW1mX/j0rsVHvJsJ6DdZKML2vW9:BQcRW2UVT/95gG3UX/j3ZyvW9

    Score
    1/10
    behavioral25

    • Target

      XWorm/XWorm V5.1/Plugins/Microphone.dll

    • Size

      540KB

    • MD5

      804f03d871987dcd68bb40c48e357b00

    • SHA1

      53ec193ec4fb2c4a6f847cbc400d6c4b51f67ccf

    • SHA256

      6e6da842ab5f317b9b5d390be8df26d8775f49778f734175f06c11dac2ab676e

    • SHA512

      e77a2475cbdf1a4dfcf81c40b64dba9547832374009af15679f03fd966137a678414e685019cf35d8b39722ea5ec2b14f5b86debe9e5d2b52103156159ce8af2

    • SSDEEP

      6144:DF8i30ykMPoxBemtSQvAVYm8Ou/JgtKMV6fb78+Ommg8YCQ18aFQRWAdoYCY8gQg:pP32emtLAV8OXebgreLrAwuaruedUB

    Score
    1/10
    behavioral26

    • Target

      XWorm/XWorm V5.1/Plugins/Ngrok-Disk.dll

    • Size

      7.0MB

    • MD5

      4b97f63ca9495e69b45bd19b4eb03c44

    • SHA1

      f454f71fdfbc95165672d9945207025be10527a0

    • SHA256

      31f33d3cc8cfa6d7e17e7efbeb3611a9f5ab2c9630e90f2f0e7e2b21d73c4ad0

    • SHA512

      bcccee6d244448c2f08ed646b2766ab9fee6a8f7b30bf2dcc9524421c1da0bc6f973eb06647c70544de4ac414170b17a7a51631f65a9dac80a1b0239e04a3661

    • SSDEEP

      196608:9CsxED7kwTV6B/nCR7+AA3e5MryK5Rj1Bpw7Vdjz8wEO+Dl:9TED7/VEqt/A3TryARj1BpwLktl

    Score
    1/10
    behavioral27

    • Target

      XWorm/XWorm V5.1/Plugins/Options.dll

    • Size

      30KB

    • MD5

      78a7db78a7fc84e7069cb44b3641e9c4

    • SHA1

      b812966a08b1ac9efe2721cd7293a07f349c144f

    • SHA256

      dac620ca30d437e6ad23218aab8646cb0dd0927b048e30261d18d7dbd1b09fc9

    • SHA512

      d0894cfa271f06485a1cac4273873b19dfbeaad06c9643176035fd5608703226fbf039439adf7aa63555882ce37f7f395f96d868abfb3723b080bf53a04e2d6a

    • SSDEEP

      768:eLxkuz7dDWH839iybgkf/sGRNW9a9dhjcI:eLNHqUPbgQsGRNW9a9

    Score
    1/10
    behavioral28

    • Target

      XWorm/XWorm V5.1/Plugins/Pastime.dll

    • Size

      17KB

    • MD5

      3ce2798e9b1eab7bb6bb1b3fd05b9d76

    • SHA1

      158381fc7878eb05165f7366f19ff31fba430ce7

    • SHA256

      875c1962bf11cf5f2028e0ef4f4bcc3daaf76580e238314bbf4e86cdffb6ada8

    • SHA512

      00db6270b743f84522bf172737fb9a6ebe0572d190cfaba6e1d044846d6adc7c73db2b364aea97589d4928ca51186efe54a755a63fbe7b6825b9440b5cb1bacf

    • SSDEEP

      384:CEoxsRLvyUi4U4R7XonhJAH+epi5zOY7//Zl/sA8/fT1:CEoKVvri4UA7YnEnwr/UA8/fh

    Score
    1/10
    behavioral29

    • Target

      XWorm/XWorm V5.1/Plugins/Performance.dll

    • Size

      15KB

    • MD5

      87e355ce53c21af0c7e99e409cda1030

    • SHA1

      fb92f0ac5608a1975ef4c6c9c909bda242d1ea57

    • SHA256

      0b5ce04c01a60c7e22dcdb787e1b531e9ed21fc085a590bc1b12ffaf2139f51f

    • SHA512

      f8621221aacb23e34d1b5f87e06f3692d9d5c3d378e2849af25ae1ed4dde543d548626bb3c6f209a453b9b073f00947016e7f918fb443513b4d64f9561f2a79a

    • SSDEEP

      192:hHGK+5+m2XJkHfeDJtmTSCWtv2l4KO+YAgVTgw1qD92B6IW1xxHHd7OVpu7IUSLe:4ywst3c1mTgOw2QxH97OVpuUqR

    Score
    1/10
    behavioral30

    • Target

      XWorm/XWorm V5.1/Plugins/ProcessManager.dll

    • Size

      17KB

    • MD5

      eb4f3ba934cf42c45f564071c843db19

    • SHA1

      da69dab6c42295c3f44bc36cca37803e13aa8535

    • SHA256

      e068a0e8e15e3d329929bf365483136e7f0eb2a60f1deac9eadb7b2628813d7b

    • SHA512

      31c9ff22ed50aa6df704b63843bddb11db712259dd61cd7ba3bfda89ce79612f3b9a9b4e839083bca19fe1fe0e51d54928799fc9f6f62517e3cfd3e685a6980e

    • SSDEEP

      384:CdfDSm8iGh5I84ZQsCH97/Y5gLCEYptkpnrDhwK4TkAvfsxfZLnVb:CdfDV8iwmyhlYlTkAv0H

    Score
    1/10
    behavioral31

    • Target

      XWorm/XWorm V5.1/Plugins/Programs.dll

    • Size

      13KB

    • MD5

      6078a9d99bda1baea4278c58e8c2d770

    • SHA1

      739e812a578e9824a2e2f995e309fc951a7c9c4c

    • SHA256

      6b51fc64e9ad16c34249ee1e17011115832482b3f11e2abaf45fc3914d6990b0

    • SHA512

      ba6ce606eb04bc6293c9ffe781df502f6f9468515a9d6311a8a3a71f4643f83fde3055ffebf9f80e14a7bcdb5559f3d8f2f5d369a519fa4b7252c55041157ebe

    • SSDEEP

      384:8A3FIPiu78UTyGS7dnTu5lYTX/1gTEedNtb:8A3Mr78UTy5BTp/1lKn

    Score
    1/10
    behavioral32

MITRE ATT&CK Matrix

Tasks