Overview

overview

10

Static

static

10

XWorm v5.1-5.2.rar

windows11-21h2-x64

7

XWorm v5.1...db.dll

windows11-21h2-x64

1

XWorm v5.1...db.dll

windows11-21h2-x64

1

XWorm v5.1...ks.dll

windows11-21h2-x64

1

XWorm v5.1...il.dll

windows11-21h2-x64

1

XWorm v5.1...ts.dll

windows11-21h2-x64

1

XWorm v5.1...re.dll

windows11-21h2-x64

1

XWorm v5.1...rs.dll

windows11-21h2-x64

1

XWorm v5.1...ed.dll

windows11-21h2-x64

1

XWorm v5.1...ls.dll

windows11-21h2-x64

1

XWorm v5.1...io.dll

windows11-21h2-x64

1

XWorm v5.1...on.dll

windows11-21h2-x64

1

XWorm v5.1...ws.dll

windows11-21h2-x64

1

XWorm v5.1...ne.dll

windows11-21h2-x64

1

XWorm v5.1...at.dll

windows11-21h2-x64

1

XWorm v5.1...rd.dll

windows11-21h2-x64

1

XWorm v5.1...ss.dll

windows11-21h2-x64

1

XWorm v5.1...er.dll

windows11-21h2-x64

1

XWorm v5.1...er.dll

windows11-21h2-x64

1

XWorm v5.1...DP.dll

windows11-21h2-x64

1

XWorm v5.1...me.txt

windows11-21h2-x64

3

XWorm v5.1...at.wav

windows11-21h2-x64

6

XWorm v5.1...ro.wav

windows11-21h2-x64

6

XWorm v5.1...xe.xml

windows11-21h2-x64

1

XWorm v5.1...config

windows11-21h2-x64

3

XWorm v5.1...config

windows11-21h2-x64

3

XWorm v5.1...me.txt

windows11-21h2-x64

3

XWorm v5.1...at.wav

windows11-21h2-x64

6

XWorm v5.1...ro.wav

windows11-21h2-x64

6

XWorm v5.1...xe.xml

windows11-21h2-x64

1

XWorm v5.1...config

windows11-21h2-x64

3

XWorm v5.1...config

windows11-21h2-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XWorm v5.1-5.2.rar

  • Size

    59.1MB

  • Sample

    241228-l7fdcaxqfj

  • MD5

    e3f7a5a1e268975a4cc2723f6840e668

  • SHA1

    b4e0d6706ad573a55218120900103701ba040cf5

  • SHA256

    b52bc0e94ae7c823753777aab3223ec9eda314584744c7bd7a2c624e68ad5028

  • SHA512

    e88dfab1323b5836e80c494350cc2f2d51f60bd69d538c56e1d58bd7a87be84c44005e457c38bd4ec8157c3c5ddb713cd9e4bf9dda79ae7a75d57ea559e0ac40

  • SSDEEP

    1572864:qhRM3ZiixNAjYqHIho/qUhOb2WtjXv3TFljOuQc:Q+LDc1Iy/qUhOb2q3TFlj9

Score
10/10
stormkittyagilenetdiscovery

Malware Config

Targets

    • Target

      XWorm v5.1-5.2.rar

    • Size

      59.1MB

    • MD5

      e3f7a5a1e268975a4cc2723f6840e668

    • SHA1

      b4e0d6706ad573a55218120900103701ba040cf5

    • SHA256

      b52bc0e94ae7c823753777aab3223ec9eda314584744c7bd7a2c624e68ad5028

    • SHA512

      e88dfab1323b5836e80c494350cc2f2d51f60bd69d538c56e1d58bd7a87be84c44005e457c38bd4ec8157c3c5ddb713cd9e4bf9dda79ae7a75d57ea559e0ac40

    • SSDEEP

      1572864:qhRM3ZiixNAjYqHIho/qUhOb2WtjXv3TFljOuQc:Q+LDc1Iy/qUhOb2q3TFlj9

    Score
    7/10
    agilenetdiscovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet
    behavioral1

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Mono.Cecil.Mdb.dll

    • Size

      42KB

    • MD5

      1c6aca0f1b1fa1661fc1e43c79334f7c

    • SHA1

      ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d

    • SHA256

      411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b

    • SHA512

      1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76

    • SSDEEP

      768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS

    Score
    1/10
    behavioral2

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Mono.Cecil.Pdb.dll

    • Size

      87KB

    • MD5

      6d5eb860c2be5dbeb470e7d3f3e7dda4

    • SHA1

      80c76660b87c52127b1a7da48e27700f75362041

    • SHA256

      447ede1984bb4acd73bd97c0ec57a11c079cee8301c91fb199ca98c1906d3cc4

    • SHA512

      64cf4fe7de68a35720d2b9338ba9cf182e127d95d72d2ccf7ff5c73a368133663e70c988a460825fa87b2d03717a4447948d5262f56aceb7c3bf1cb3ab5a41a5

    • SSDEEP

      1536:2OCAsdBo+am5OMwr5IlALYKXgAJGsZhTjrjvjCXeO:ZCjta0OMuIlArVJGqT/jveXeO

    Score
    1/10
    behavioral3

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Mono.Cecil.Rocks.dll

    • Size

      27KB

    • MD5

      6e7f0f4fff6c49e3f66127c23b7f1a53

    • SHA1

      14a529f8c7ee9f002d1e93dcf8ff158ab74c7e1a

    • SHA256

      2e2623319bdc362974a78ea4a43f4893011ec257884d24267f4594142fcd436e

    • SHA512

      0c773da6717dd6919cd6241d3cee26ab00bb61ea2dbeff24844a067af4c87ff5cbdb2fe3ada5db4707cee921b3fb353bd12ee22b8490597d4f67ad39bace235e

    • SSDEEP

      384:70ve8JOuJ5iC7n2NwxEXCni+VXcMeDz8PmR1ugLoaeuLMBG9UphJAprjE3uFLHa9:7+m4iCyrXOhG8uRssveum1pMFLHFBvd

    Score
    1/10
    behavioral4

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Mono.Cecil.dll

    • Size

      350KB

    • MD5

      de69bb29d6a9dfb615a90df3580d63b1

    • SHA1

      74446b4dcc146ce61e5216bf7efac186adf7849b

    • SHA256

      f66f97866433e688acc3e4cd1e6ef14505f81df6b26dd6215e376767f6f954bc

    • SHA512

      6e96a510966a4acbca900773d4409720b0771fede37f24431bf0d8b9c611eaa152ba05ee588bb17f796d7b8caaccc10534e7cc1c907c28ddfa54ac4ce3952015

    • SSDEEP

      6144:jIevdbLPNYe8bikm98KXPHhOWY/fFREomhUFD3z:se1PNL+QRfBg/f/EWFD

    Score
    1/10
    behavioral5

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/MonoMod.Backports.dll

    • Size

      138KB

    • MD5

      dd43356f07fc0ce082db4e2f102747a2

    • SHA1

      aa0782732e2d60fa668b0aadbf3447ef70b6a619

    • SHA256

      e375b83a3e242212a2ed9478e1f0b8383c1bf1fdfab5a1cf766df740b631afd6

    • SHA512

      284d64b99931ed1f2e839a7b19ee8389eefaf6c72bac556468a01f3eb17000252613c01dbae88923e9a02f3c84bcab02296659648fad727123f63d0ac38d258e

    • SSDEEP

      3072:kRu+JWxtm5UE1cy/4HJW/SwUif9T2FpsP3Y+RJgv:kRTJWfNE1CuSMlTIeTRm

    Score
    1/10
    behavioral6

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/MonoMod.Core.dll

    • Size

      216KB

    • MD5

      b808181453b17f3fc1ab153bf11be197

    • SHA1

      bce86080b7eb76783940d1ff277e2b46f231efe9

    • SHA256

      da00cdfab411f8f535f17258981ec51d1af9b0bfcee3a360cbd0cb6f692dbcdd

    • SHA512

      a2d941c6e69972f99707ade5c5325eb50b0ec4c5abf6a189eb11a46606fed8076be44c839d83cf310b67e66471e0ea3f6597857a8e2c7e2a7ad6de60c314f7d3

    • SSDEEP

      6144:mV+Fj3NL3NdYIRTdJ3AdHwSOTboZK3MYt:hFj3NL3NdYIRTdJ3AdHp2

    Score
    1/10
    behavioral7

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/MonoMod.ILHelpers.dll

    • Size

      6KB

    • MD5

      6512e89e0cb92514ef24be43f0bf4500

    • SHA1

      a039c51f89656d9d5c584f063b2b675a9ff44b8e

    • SHA256

      1411e4858412ded195f0e65544a4ec8e8249118b76375050a35c076940826cd0

    • SHA512

      9ffb2ff050cce82dbfbbb0e85ab5f976fcd81086b3d8695502c5221c23d14080f0e494a33e0092b4feb2eda12e2130a2f02df3125733c2f5ec31356e92dea00b

    • SSDEEP

      96:XC5172VL9HZNBrfq7LgcA6S8I2DqDXGnADX62WuauAuRt/0:q8xDfYLgcAMtAXG+rPVL/

    Score
    1/10
    behavioral8

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/MonoMod.Iced.dll

    • Size

      623KB

    • MD5

      c24584c6b5bc57ac46727ab15e332c4a

    • SHA1

      dadd68f0fa45845fbc30fd0f8f54e8616cdd2d0b

    • SHA256

      ef4a8f28226db390dd07de13afc01c8000e127c978ebf428a6637f39ac277033

    • SHA512

      aabc699eef08e3483049c7ceb48842deddc52284de7f6f72d56d6eccac3989cc373839aeac61f03e7b2af203744d579fd96a4eb911cfdd0461b151c41dc6771d

    • SSDEEP

      6144:Xw98C3SQzlfuStslPYAH+jUmLdf26bfDcj2511Qxu7F:q8CCYlfuGslPn+jvDTDcj251+xuR

    Score
    1/10
    behavioral9

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/MonoMod.Utils.dll

    • Size

      319KB

    • MD5

      79f1c4c312fdbb9258c2cdde3772271f

    • SHA1

      a143434883e4ef2c0190407602b030f5c4fdf96f

    • SHA256

      f22a4fa1e8b1b70286ecf07effb15d2184454fa88325ce4c0f31ffadb4bef50a

    • SHA512

      b28ed3c063ae3a15cd52e625a860bbb65f6cd38ccad458657a163cd927c74ebf498fb12f1e578e869bcea00c6cd3f47ede10866e34a48c133c5ac26b902ae5d9

    • SSDEEP

      6144:9gPf7SkKpBmBEKFutWL7dyywUQ1MWWavAsXjb:q7Svp8EtO49N

    Score
    1/10
    behavioral10

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/NAudio.dll

    • Size

      502KB

    • MD5

      3b87d1363a45ce9368e9baec32c69466

    • SHA1

      70a9f4df01d17060ec17df9528fca7026cc42935

    • SHA256

      81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451

    • SHA512

      1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7

    • SSDEEP

      6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS

    Score
    1/10
    behavioral11

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Newtonsoft.Json.dll

    • Size

      695KB

    • MD5

      195ffb7167db3219b217c4fd439eedd6

    • SHA1

      1e76e6099570ede620b76ed47cf8d03a936d49f8

    • SHA256

      e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d

    • SHA512

      56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac

    • SSDEEP

      12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/

    Score
    1/10
    behavioral12

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Plugins/ActiveWindows.dll

    • Size

      14KB

    • MD5

      a89dd74272c4221a3921b8f34918c086

    • SHA1

      101d496a80a3f32308c85328898747ba1f67bd18

    • SHA256

      32ac14f117af3a2973e0303d9da754888f23f6ff1730897f47b4f93d000ce75b

    • SHA512

      026be43a25f3f1afeaa44420954db22e0841177ab02bece816f25a921e47dd0c1a049ca0d44c3fc0e57ee3a049dc7452611e5c85f0fea962529415220b2b3264

    • SSDEEP

      192:FpsFElxHxzCXorWcsvaUJwfdBuo1I5+3gqT8AO1tW9Yr6IW1GXZ3+eY7EDmSLOb:0FELRzbrUw/AodT8ptsY7XZ34ED8b

    Score
    1/10
    behavioral13

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Plugins/All-In-One.dll

    • Size

      4.8MB

    • MD5

      e5cb40383701b4ebd098176c513936bc

    • SHA1

      ac263e44faaeffe28859dfb9c95aa969107d2a7a

    • SHA256

      0dca9d815f8ea9aff7ca121071424914fa830c31369a93804a63e44078274f95

    • SHA512

      cb161d3484fbb2247b907216e3d556a8545b0070dddbf294537d84b03b3e8503dae75f2cbce7e7cec03673085b46188ec108647e2c4e44627bb4ca4f489c6b03

    • SSDEEP

      98304:1l19F9QORkChiDC9OtH7c2iwGxIvPBOw0JefVfQ2a5cFd4KssODtd:l9FPRkC8C9OH7c2ilInz0kfVo26Wsd

    Score
    1/10
    behavioral14

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Plugins/Chat.dll

    • Size

      18KB

    • MD5

      a60e5d4390b1f8c6f94b255481ad7f51

    • SHA1

      0fd7e0cea1ba811a31be8aaac803dd107e4caec4

    • SHA256

      3ef58d9a1d148af6c379b9ffe7d090268ed6a042ce640ea59803be8caf6cb1a3

    • SHA512

      6d3ed8afdabea1b43b6ecb2ed0beeff27f34123619ab688967fbe1f28971eea85612aba0baaad9bfe3c9b156d2b6c3f4f56ed4a08901b089f34cb103c440c11e

    • SSDEEP

      384:BUeRbCtl+SLFxdQ0C7sKmsfcrwTKvh6GIKoIefWUWmf9:s4SpxaoKmJr0pIefWXO

    Score
    1/10
    behavioral15

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Plugins/Clipboard.dll

    • Size

      14KB

    • MD5

      e2e2246f73a7ea4cf79e9cd5cafec405

    • SHA1

      d97595d61f49c86bdf3b63707af27d8dd7103afd

    • SHA256

      51c9a0c4c741d0a0439b7f7b0930325c1e43a0fa78fec21244ded9e3e2400299

    • SHA512

      b09b1898799b3425fa3a1395977a68b19f193927a3a1db56d4302944373b635498fc7b34a60492dd78545c565c6765a282685fec332052591563298bd1972624

    • SSDEEP

      192:s+e2PZKYnw/LzXsJ0zzBa70OFXgNTer149iY6IW1mX/60VCCWk7RSLWMU:82ZE3sJ0ha70USTe5Wi2X/6SjMU

    Score
    1/10
    behavioral16

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Plugins/Cmstp-Bypass.dll

    • Size

      11KB

    • MD5

      cf15259e22b58a0dfd1156ab71cbd690

    • SHA1

      3614f4e469d28d6e65471099e2d45c8e28a7a49e

    • SHA256

      fa420fd3d1a5a2bb813ef8e6063480099f19091e8fa1b3389004c1ac559e806b

    • SHA512

      7302a424ed62ec20be85282ff545a4ca9e1aecfe20c45630b294c1ae72732465d8298537ee923d9e288ae0c48328e52ad8a1a503e549f8f8737fabe2e6e9ad38

    • SSDEEP

      192:KpXpS1QWlPkiqdE7FNNGGO9mWbpGkjgyaYcIW1vr/8TNU7aL7YiLsO08hdW5:Kp5IfL0mWbEkUyaYir/oNJL7KQ

    Score
    1/10
    behavioral17

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Plugins/FileManager.dll

    • Size

      679KB

    • MD5

      5a88ad1ebd121a9eb4a520cf97ca6fc8

    • SHA1

      72e88df92a996ec55ed7dc815fc208fae160e5ba

    • SHA256

      7e9a443f43bd92777ac7e4fca8f6b44e7a9912835dd022aaa68c6dd9c70ec7aa

    • SHA512

      b07a55513e0be20efbecf583f0d22d2b6051ae7890af95dc65ff84b582f8c806aeff930d6295a68d6e6a8bf310e047990915c84e0f92dd2437a23ee2290776f7

    • SSDEEP

      12288:B9wCuLvFdA0uuBK69dN0RpNBgucQDdnGtNVcwlT:HOLvFdA0uuBK69D07NBrcQDdnGtNV

    Score
    1/10
    behavioral18

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Plugins/FileSeacher.dll

    • Size

      478KB

    • MD5

      ddd4ae137e023e293477e0f52a982ee4

    • SHA1

      2decefb69bcfb8306c519ff98c0277bbca8fd40f

    • SHA256

      c1bb7f89e10f3e4214b8213e728e6bf5bee8d5dfe66aa304f1396fe6afa2f933

    • SHA512

      a1ec9d3ebfe4dae3ba7b2e744cfbe546bfabc15795ba9c3c9624da2b7c4564244c3570d202964137ac1239e038d2f999976dfc0ad359808a285e661e6946dfc0

    • SSDEEP

      6144:+88L5lWTUVRTw/l97teGtSV41QJDsTDDh0Yhe6dwxLV/tuhgpn5vWRBI+WR:3zTUVRTw1lS4Ys50ie6Cf4gpys

    Score
    1/10
    behavioral19

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Plugins/HRDP.dll

    • Size

      1.7MB

    • MD5

      5dd14343d120def51a8504a35c83f5b9

    • SHA1

      1458b2629901200bf4b6fe6b6258ebcca083404b

    • SHA256

      06112658d3f250bdc136fbfce07c9b93772aa3aadbde9893a34e9f5962121445

    • SHA512

      7230dd19eeece4aba9c5b97cfa273d6f9957c9b59ae2e60bb0811b4ae0fc82597fe64039c1ea7dae8bf9b8d81732022b96153cd9ecd8ae5ff2359b2ff1f8722b

    • SSDEEP

      24576:qdKrKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:qdLHZ5pdqYH8ia6GcKuR7

    Score
    1/10
    behavioral20

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Readme.txt

    • Size

      235B

    • MD5

      85122ad50370f9a829b6602384b1b644

    • SHA1

      6d0dc94e7fe82650422a17368314da0da58af6b5

    • SHA256

      444cbc7b57b4a6198ee1474fd9623e1afcb8c7a0b180f05e961a822f4365499b

    • SHA512

      a3ccd49bc0424534ba3b5ee558709022dd31d257ca48fd2eb8d7305ec098dc9275e016da332d293b7cdbdc5e91b82c7602c15abc52c0c0c4f3c81d4126b4afd6

    Score
    3/10
    behavioral21

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Sounds/Chat.wav

    • Size

      45KB

    • MD5

      832a3652fd780edcdb2439ec33532c0d

    • SHA1

      f0754ee6519d77700f5ee5b744b8c99386d7b577

    • SHA256

      45f4136e58a5f749d125d2ab54308f81954d2c5b364b66013660a6c358845d1e

    • SHA512

      3b3b55afcdfa00d9b7085b20ed52a7b4d8b7d403f5d0d1c539781db1a20257efd8c856e19b8f32ea33766a580690b498ff063849519691a9a4cbbcd3e9447cd4

    • SSDEEP

      768:QVPqefmaP5C3KduJn13jSHYHzIcr6DPW75Pvi3Fy5NQbIbhuJLA+LhDclY3Rp6:yP1mU5GlJnBS4TIQ6o163ofQ8b4Pfm

    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral22

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/Sounds/Intro.wav

    • Size

      238KB

    • MD5

      ad3b4fae17bcabc254df49f5e76b87a6

    • SHA1

      1683ff029eebaffdc7a4827827da7bb361c8747e

    • SHA256

      e3e5029bf5f29fa32d2f6cdda35697cd8e6035d5c78615f64d0b305d1bd926cf

    • SHA512

      3d6ecc9040b5079402229c214cb5f9354315131a630c43d1da95248edc1b97627fb9ba032d006380a67409619763fb91976295f8d22ca91894c88f38bb610cd3

    • SSDEEP

      3072:FU3hYG9X9JzhaLL5+QYKHZDa6D+4LT92KEpcP+b8FGUt0Ybs5e9jXjubLtNmBNs9:GjVsLL5lva6D+4P9llWvaGe9CHeBNm

    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral23

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/XWorm V5.1.exe.config

    • Size

      183B

    • MD5

      66f09a3993dcae94acfe39d45b553f58

    • SHA1

      9d09f8e22d464f7021d7f713269b8169aed98682

    • SHA256

      7ea08548c23bd7fd7c75ca720ac5a0e8ca94cb51d06cd45ebf5f412e4bbdd7d7

    • SHA512

      c8ea53ab187a720080bd8d879704e035f7e632afe1ee93e7637fad6bb7e40d33a5fe7e5c3d69134209487d225e72d8d944a43a28dc32922e946023e89abc93ed

    Score
    1/10
    behavioral24

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/XWormLoader 5.1 x32.exe.config

    • Size

      187B

    • MD5

      15c8c4ba1aa574c0c00fd45bb9cce1ab

    • SHA1

      0dad65a3d4e9080fa29c42aa485c6102d2fa8bc8

    • SHA256

      f82338e8e9c746b5d95cd2ccc7bf94dd5de2b9b8982fffddf2118e475de50e15

    • SHA512

      52baac63399340427b94bfdeb7a42186d5359ce439c3d775497f347089edfbf72a6637b23bb008ab55b8d4dd3b79a7b2eb7c7ef922ea23d0716d5c3536b359d4

    Score
    3/10
    behavioral25

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.1/XWormLoader 5.1 x64.exe.config

    • Size

      187B

    • MD5

      15c8c4ba1aa574c0c00fd45bb9cce1ab

    • SHA1

      0dad65a3d4e9080fa29c42aa485c6102d2fa8bc8

    • SHA256

      f82338e8e9c746b5d95cd2ccc7bf94dd5de2b9b8982fffddf2118e475de50e15

    • SHA512

      52baac63399340427b94bfdeb7a42186d5359ce439c3d775497f347089edfbf72a6637b23bb008ab55b8d4dd3b79a7b2eb7c7ef922ea23d0716d5c3536b359d4

    Score
    3/10
    behavioral26

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.2/Readme.txt

    • Size

      235B

    • MD5

      85122ad50370f9a829b6602384b1b644

    • SHA1

      6d0dc94e7fe82650422a17368314da0da58af6b5

    • SHA256

      444cbc7b57b4a6198ee1474fd9623e1afcb8c7a0b180f05e961a822f4365499b

    • SHA512

      a3ccd49bc0424534ba3b5ee558709022dd31d257ca48fd2eb8d7305ec098dc9275e016da332d293b7cdbdc5e91b82c7602c15abc52c0c0c4f3c81d4126b4afd6

    Score
    3/10
    behavioral27

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.2/Sounds/Chat.wav

    • Size

      45KB

    • MD5

      832a3652fd780edcdb2439ec33532c0d

    • SHA1

      f0754ee6519d77700f5ee5b744b8c99386d7b577

    • SHA256

      45f4136e58a5f749d125d2ab54308f81954d2c5b364b66013660a6c358845d1e

    • SHA512

      3b3b55afcdfa00d9b7085b20ed52a7b4d8b7d403f5d0d1c539781db1a20257efd8c856e19b8f32ea33766a580690b498ff063849519691a9a4cbbcd3e9447cd4

    • SSDEEP

      768:QVPqefmaP5C3KduJn13jSHYHzIcr6DPW75Pvi3Fy5NQbIbhuJLA+LhDclY3Rp6:yP1mU5GlJnBS4TIQ6o163ofQ8b4Pfm

    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral28

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.2/Sounds/Intro.wav

    • Size

      238KB

    • MD5

      ad3b4fae17bcabc254df49f5e76b87a6

    • SHA1

      1683ff029eebaffdc7a4827827da7bb361c8747e

    • SHA256

      e3e5029bf5f29fa32d2f6cdda35697cd8e6035d5c78615f64d0b305d1bd926cf

    • SHA512

      3d6ecc9040b5079402229c214cb5f9354315131a630c43d1da95248edc1b97627fb9ba032d006380a67409619763fb91976295f8d22ca91894c88f38bb610cd3

    • SSDEEP

      3072:FU3hYG9X9JzhaLL5+QYKHZDa6D+4LT92KEpcP+b8FGUt0Ybs5e9jXjubLtNmBNs9:GjVsLL5lva6D+4P9llWvaGe9CHeBNm

    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral29

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.2/XWorm V5.2.exe.config

    • Size

      183B

    • MD5

      66f09a3993dcae94acfe39d45b553f58

    • SHA1

      9d09f8e22d464f7021d7f713269b8169aed98682

    • SHA256

      7ea08548c23bd7fd7c75ca720ac5a0e8ca94cb51d06cd45ebf5f412e4bbdd7d7

    • SHA512

      c8ea53ab187a720080bd8d879704e035f7e632afe1ee93e7637fad6bb7e40d33a5fe7e5c3d69134209487d225e72d8d944a43a28dc32922e946023e89abc93ed

    Score
    1/10
    behavioral30

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.2/XWormLoader 5.2 x32.exe.config

    • Size

      187B

    • MD5

      15c8c4ba1aa574c0c00fd45bb9cce1ab

    • SHA1

      0dad65a3d4e9080fa29c42aa485c6102d2fa8bc8

    • SHA256

      f82338e8e9c746b5d95cd2ccc7bf94dd5de2b9b8982fffddf2118e475de50e15

    • SHA512

      52baac63399340427b94bfdeb7a42186d5359ce439c3d775497f347089edfbf72a6637b23bb008ab55b8d4dd3b79a7b2eb7c7ef922ea23d0716d5c3536b359d4

    Score
    3/10
    behavioral31

    • Target

      XWorm v5.1-5.2/XWorm/XWorm V5.2/XWormLoader 5.2 x64.exe.config

    • Size

      187B

    • MD5

      15c8c4ba1aa574c0c00fd45bb9cce1ab

    • SHA1

      0dad65a3d4e9080fa29c42aa485c6102d2fa8bc8

    • SHA256

      f82338e8e9c746b5d95cd2ccc7bf94dd5de2b9b8982fffddf2118e475de50e15

    • SHA512

      52baac63399340427b94bfdeb7a42186d5359ce439c3d775497f347089edfbf72a6637b23bb008ab55b8d4dd3b79a7b2eb7c7ef922ea23d0716d5c3536b359d4

    Score
    3/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

agilenetstormkitty
Score
10/10

behavioral1

agilenetdiscovery
Score
7/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
3/10

behavioral22

discovery
Score
6/10

behavioral23

discovery
Score
6/10

behavioral24

Score
1/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

Score
3/10

behavioral28

discovery
Score
6/10

behavioral29

discovery
Score
6/10

behavioral30

Score
1/10

behavioral31

Score
3/10

behavioral32

Score
3/10