stormkitty | 6e494d5e336fc6f29a443119078e751d349520c268a845ee81d14a734562bc52

Sharing

Copy URL Twitter E-mail

General

Target
XWorm V5.6 @Mr.JoEx.zip
Size 24.9MB
Sample241129-vtfxdsxmcw
SHA256 6e494d5e336fc6f29a443119078e751d349520c268a845ee81d14a734562bc52
MD5 e755c947c81fa1d0ec649a4e2cb025c9
SHA1 8751f7cf67e4dd83f184b2ca247662a96926ae2d
SHA512 772694f41a5cb9d84cd091bb655cb13624c4b71bb67e1c247baa613a023fb504f649bc905b181e6d053fd0eec28641692ac005495cc5ff33e2faf9046703e518
SSDEEP 786432:6yYXp1FGOaSo/jlWYvEfMao3zh+XyxwPoWCFwP9w:OXp1FJa3TcfMv3zh6yOPFIki
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

stormkitty

Malware Config

Targets

- Target
  XWorm V5.6 @Mr.JoEx/AjaxMin.dll
- Size 500KB
- SHA256 ef086ea3a26d9a0261a8987d4f4c0f1370f1a5b852e06ac64002708d3a815df9
- MD5 aef65bb1dbd63ea503c3062f19294b68
- SHA1 991236e7af917ff58a4b2b354fac07c9897094dd
- SHA512 6af3b5d1a7ca3d718e3dba761887dd2261005007a1e06b8f7e0676429549289777950dfcff79944c33b43ae791e0ce0da2b7b9da9d772408c3fcf6101972c1bf
- SSDEEP 12288:Ji8n1Et3Th/mCJ5ZSgbavGhfZw2lOZgfUI8A2:d1o34CJ5ZSTehfJOZgfURA
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  XWorm V5.6 @Mr.JoEx/FastColoredTextBox.dll
- Size 323KB
- SHA256 6eb6a0c64ee8c575f56a93065138b17883118cf231a6916fc601ec86793d85bf
- MD5 93b19f24add82a6cda96bbb3eaa755f9
- SHA1 b83179a79862aedc92ee79b6cb8a7e4525266687
- SHA512 2521a11cc557b68b05f57048d1f2bb719fcac86c19e151bc16d3938d45f9c7ece72a5573d3293b0c290cb7f141c0dc3a1aa422444997473697836ec4a112a8f6
- SSDEEP 6144:5creWpl5UDYd01MVwKaWVwu1h3eE3L/CdesqtLDI5eNBAkM:5eJyDgaKlrh3bb/I3eNOk
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  XWorm V5.6 @Mr.JoEx/Fixer.bat
- Size 122B
- SHA256 a11703fd47d16020fa099a95bb4e46247d32cf8821dc1826e77a971cdd3c4c55
- MD5 2dabc46ce85aaff29f22cd74ec074f86
- SHA1 208ae3e48d67b94cc8be7bbfd9341d373fa8a730
- SHA512 6a50b525bc5d8eb008b1b0d704f9942f72f1413e65751e3de83d2e16ef3cf02ef171b9da3fff0d2d92a81daac7f61b379fcf7a393f46e914435f6261965a53b3
- MD5 SHA1 SHA512
Score

1^/10
behavioral5 behavioral6
- Target
  XWorm V5.6 @Mr.JoEx/GMap.NET.Core.dll
- Size 2.9MB
- SHA256 58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86
- MD5 819352ea9e832d24fc4cebb2757a462b
- SHA1 aba7e1b29bdcd0c5a307087b55c2ec0c7ca81f11
- SHA512 6a5b0e1553616ea29ec72c12072ae05bdd709468a173e8adbdfe391b072c001ecacb3dd879845f8d599c6152eca2530cdaa2c069b1f94294f778158eaaebe45a
- SSDEEP 49152:ot12Gb/hz7ZsK9qY5uyUW57VC4IB1+fXhQ1hyCzMw/22fSg7gjxhUE/nbTC0xemh:oLbteKb57W1+PhQ1HM1gmJ/SZmh
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  XWorm V5.6 @Mr.JoEx/GMap.NET.WindowsForms.dll
- Size 147KB
- SHA256 741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365
- MD5 32a8742009ffdfd68b46fe8fd4794386
- SHA1 de18190d77ae094b03d357abfa4a465058cd54e3
- SHA512 22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b
- SSDEEP 3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  XWorm V5.6 @Mr.JoEx/Gmap.net.dll
- Size 30KB
- SHA256 154ac3cb6d6ace7e19456ab555eac7760f9a32926e31c2470301212a49c503ab
- MD5 079550184184226caed9fa4efb32e9d1
- SHA1 c077dfceca0edae75d0ba40b585e845855ff84e2
- SHA512 4be8213f97a82ba548449e1bebabb70a6492e257f4b00c7b711be7b3384618010c42dace5bf3382a88313adc4bd2e29d766b7f076e2217118de4e353aa73c6fe
- SSDEEP 768:IBw8ELbBHL3IRaaqc821h+dHdjjZI/OhX+qzd0dUN:IerTaHSZI/y
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  XWorm V5.6 @Mr.JoEx/Guna.Charts.WinForms.dll
- Size 553KB
- SHA256 19e2fbd81cf173ee12a6e94a43ed412ea71eaf667db0c68db9890e685e826ba2
- MD5 80dc65e8c6586a664399391378c7000a
- SHA1 79b8da76544b079e53306d026bb4225e3abe1f85
- SHA512 d9f9bdc90d36b9d0b34e1d993a9996e4e2fe561204cb84d818ba309b186eee3e3448828c620f88e09b97db0c7ec7d667f7ea8d559d9fb819ce8d13812c2565bf
- SSDEEP 6144:wfpy975zR82JiG0bgmL7Hi/21jBbxIwfTH+jO6kGKDrROZm1He6g66flAyQhZWMZ:wf891+2J+bXByZjO6kGKpv1He6gz0U2L
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  XWorm V5.6 @Mr.JoEx/Guna.UI2.dll
- Size 1.9MB
- SHA256 c6264665a882e73eb2262a74fea2c29b1921a9af33180126325fb67a851310ef
- MD5 bcc0fe2b28edd2da651388f84599059b
- SHA1 44d7756708aafa08730ca9dbdc01091790940a4f
- SHA512 3bfc3d27c095dde988f779021d0479c8c1de80a404454813c6cae663e3fe63dc636bffa7de1094e18594c9d608fa7420a0651509544722f2a00288f0b7719cc8
- SSDEEP 24576:FIVZLRYIVQd9INo3FDbWX7SsOobBTEAjg+m+ZFNwaxwGoHQ/jzK+:+oWodbi9XFEAjg+m+ZFKaxw
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  XWorm V5.6 @Mr.JoEx/IconExtractor.dll
- Size 10KB
- SHA256 440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
- MD5 640d8ffa779c6dd5252a262e440c66c0
- SHA1 3252d8a70a18d5d4e0cc84791d587dd12a394c2a
- SHA512 e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32
- SSDEEP 192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  XWorm V5.6 @Mr.JoEx/NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  XWorm V5.6 @Mr.JoEx/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  XWorm V5.6 @Mr.JoEx/Plugins/ActiveWindows.dll
- Size 14KB
- SHA256 567b9861026a0dbc5947e7515dc7ab3f496153f6b3db57c27238129ec207fc52
- MD5 5a766a4991515011983ceddf7714b70b
- SHA1 4eb00ae7fe780fa4fe94cedbf6052983f5fd138b
- SHA512 4bd6b24e236387ff58631207ea42cd09293c3664468e72cd887de3b3b912d3795a22a98dcf4548fb339444337722a81f8877abb22177606d765d78e48ec01fd8
- SSDEEP 384:vRt5r7olU5QrGPbMrodT8ptsY7XZ1EDI6:vRtSRrGPb9t0Z1ED7
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  XWorm V5.6 @Mr.JoEx/Plugins/Chat.dll
- Size 18KB
- SHA256 aab20f465955d77d6ec3b5c1c5f64402a925fb565dda5c8e38c296cb7406e492
- MD5 59f75c7ffaccf9878a9d39e224a65adf
- SHA1 46b0f61a07e85e3b54b728d9d7142ddc73c9d74b
- SHA512 80056163b96ce7a8877874eaae559f75217c0a04b3e3d4c1283fe23badfc95fe4d587fd27127db4be459b8a3adf41900135ea12b0eeb4187adbcf796d9505cb8
- SSDEEP 384:4MOna4ifKQtuUvl0BY0iYUsBG/crwTKvh6GIKoIafWUWmfN:vKQtuq2Y0lUUG0r0pIafWXe
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  XWorm V5.6 @Mr.JoEx/Plugins/Chromium.dll
- Size 32KB
- SHA256 b6d8bccdf123ceac6b9642ad3500d4e0b3d30b9c9dd2d29499d38c02bd8f9982
- MD5 edb2f0d0eb08dcd78b3ddf87a847de01
- SHA1 cc23d101f917cad3664f8c1fa0788a89e03a669c
- SHA512 8f87da834649a21a908c95a9ea8e2d94726bd9f33d4b7786348f6371dfae983cc2b5b5d4f80a17a60ded17d4eb71771ec25a7c82e4f3a90273c46c8ee3b8f2c3
- SSDEEP 768:6SyQlmUmBlEu0FXfjq2sgDrLjfcVJ5sN9aWdMIxbKhJ+GEq3ZsL5f62:3yQltmBlmFXfjq2sgDrLjfcVJ5sNkQOa
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  XWorm V5.6 @Mr.JoEx/Plugins/Clipboard.dll
- Size 14KB
- SHA256 e31a1c2b1baa2aa2c36cabe3da17cd767c8fec4c206bd506e889341e5e0fa959
- MD5 831eb0de839fc13de0abab64fe1e06e7
- SHA1 53aad63a8b6fc9e35c814c55be9992abc92a1b54
- SHA512 2f61bcf972671d96e036b3c99546cd01e067bef15751a87c00ba6d656decb6b69a628415e5363e650b55610cf9f237585ada7ce51523e6efc0e27d7338966bee
- SSDEEP 192:xh23MTInqHX7qRlrZk1/X7eOFXgNTer149iY6IW1mX/YWMqS7RSLOIU:cTWElV0/X7eUSTe5Wi2X/ShIU
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  XWorm V5.6 @Mr.JoEx/Plugins/Cmstp-Bypass.dll
- Size 11KB
- SHA256 fa420fd3d1a5a2bb813ef8e6063480099f19091e8fa1b3389004c1ac559e806b
- MD5 cf15259e22b58a0dfd1156ab71cbd690
- SHA1 3614f4e469d28d6e65471099e2d45c8e28a7a49e
- SHA512 7302a424ed62ec20be85282ff545a4ca9e1aecfe20c45630b294c1ae72732465d8298537ee923d9e288ae0c48328e52ad8a1a503e549f8f8737fabe2e6e9ad38
- SSDEEP 192:KpXpS1QWlPkiqdE7FNNGGO9mWbpGkjgyaYcIW1vr/8TNU7aL7YiLsO08hdW5:Kp5IfL0mWbEkUyaYir/oNJL7KQ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32