Overview

overview

10

Static

static

10

XWorm/Fast...ox.dll

windows7-x64

1

XWorm/Fast...ox.dll

windows10-2004-x64

1

XWorm/GMap...re.dll

windows7-x64

1

XWorm/GMap...re.dll

windows10-2004-x64

1

XWorm/GMap...ms.dll

windows7-x64

1

XWorm/GMap...ms.dll

windows10-2004-x64

1

XWorm/Guna.UI2.dll

windows7-x64

1

XWorm/Guna.UI2.dll

windows10-2004-x64

1

XWorm/Icon...or.dll

windows7-x64

1

XWorm/Icon...or.dll

windows10-2004-x64

1

XWorm/NAudio.dll

windows7-x64

1

XWorm/NAudio.dll

windows10-2004-x64

1

XWorm/Newt...on.dll

windows7-x64

1

XWorm/Newt...on.dll

windows10-2004-x64

1

XWorm/Simp...or.dll

windows7-x64

1

XWorm/Simp...or.dll

windows10-2004-x64

1

XWorm/XWor...er.vbs

windows7-x64

1

XWorm/XWor...er.vbs

windows10-2004-x64

1

XWorm/XWor...er.vbs

windows7-x64

1

XWorm/XWor...er.vbs

windows10-2004-x64

1

XWorm/XWor...er.vbs

windows7-x64

1

XWorm/XWor...er.vbs

windows10-2004-x64

1

XWorm/XWor...er.vbs

windows7-x64

1

XWorm/XWor...er.vbs

windows10-2004-x64

1

XWorm/XWor...er.vbs

windows7-x64

1

XWorm/XWor...er.vbs

windows10-2004-x64

1

XWorm/XWor...er.vbs

windows7-x64

1

XWorm/XWor...er.vbs

windows10-2004-x64

1

XWorm/XWor...er.vbs

windows7-x64

1

XWorm/XWor...er.vbs

windows10-2004-x64

1

XWorm/XWor...er.vbs

windows7-x64

1

XWorm/XWor...er.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XWorm.7z

  • Size

    14.8MB

  • Sample

    241231-a2wbtsypaz

  • MD5

    4dd73d277387e57b57be3bd8fac2d0d8

  • SHA1

    276d9a427925166b4e224f357a000ca66e668c77

  • SHA256

    16a21546c9073090dcda3fdfa0779ba9caa9ce3f675bf0cfc0234c2db1dc096f

  • SHA512

    d2c32a46009e5180f4da33033139bd1ebc6dee47eda5999d5d20aa7eca8284d20eed3f5ff0fb45433aa662ddab4c019483dd0190ae75717654c787dd67790cfb

  • SSDEEP

    393216:PXrWzrnWU0Ga6VhaQvNXd5ipq6JjAcnbN7NCrd62nE+NCfF1Q0z:zWzrWUlByQlX/r6hhUrd6sNOF6E

Score
10/10
stormkittyxworm

Malware Config

Targets

    • Target

      XWorm/FastColoredTextBox.dll

    • Size

      323KB

    • MD5

      93b19f24add82a6cda96bbb3eaa755f9

    • SHA1

      b83179a79862aedc92ee79b6cb8a7e4525266687

    • SHA256

      6eb6a0c64ee8c575f56a93065138b17883118cf231a6916fc601ec86793d85bf

    • SHA512

      2521a11cc557b68b05f57048d1f2bb719fcac86c19e151bc16d3938d45f9c7ece72a5573d3293b0c290cb7f141c0dc3a1aa422444997473697836ec4a112a8f6

    • SSDEEP

      6144:5creWpl5UDYd01MVwKaWVwu1h3eE3L/CdesqtLDI5eNBAkM:5eJyDgaKlrh3bb/I3eNOk

    Score
    1/10
    behavioral1behavioral2

    • Target

      XWorm/GMap.NET.Core.dll

    • Size

      2.9MB

    • MD5

      819352ea9e832d24fc4cebb2757a462b

    • SHA1

      aba7e1b29bdcd0c5a307087b55c2ec0c7ca81f11

    • SHA256

      58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86

    • SHA512

      6a5b0e1553616ea29ec72c12072ae05bdd709468a173e8adbdfe391b072c001ecacb3dd879845f8d599c6152eca2530cdaa2c069b1f94294f778158eaaebe45a

    • SSDEEP

      49152:ot12Gb/hz7ZsK9qY5uyUW57VC4IB1+fXhQ1hyCzMw/22fSg7gjxhUE/nbTC0xemh:oLbteKb57W1+PhQ1HM1gmJ/SZmh

    Score
    1/10
    behavioral3behavioral4

    • Target

      XWorm/GMap.NET.WindowsForms.dll

    • Size

      147KB

    • MD5

      32a8742009ffdfd68b46fe8fd4794386

    • SHA1

      de18190d77ae094b03d357abfa4a465058cd54e3

    • SHA256

      741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365

    • SHA512

      22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b

    • SSDEEP

      3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ

    Score
    1/10
    behavioral5behavioral6

    • Target

      XWorm/Guna.UI2.dll

    • Size

      1.9MB

    • MD5

      bcc0fe2b28edd2da651388f84599059b

    • SHA1

      44d7756708aafa08730ca9dbdc01091790940a4f

    • SHA256

      c6264665a882e73eb2262a74fea2c29b1921a9af33180126325fb67a851310ef

    • SHA512

      3bfc3d27c095dde988f779021d0479c8c1de80a404454813c6cae663e3fe63dc636bffa7de1094e18594c9d608fa7420a0651509544722f2a00288f0b7719cc8

    • SSDEEP

      24576:FIVZLRYIVQd9INo3FDbWX7SsOobBTEAjg+m+ZFNwaxwGoHQ/jzK+:+oWodbi9XFEAjg+m+ZFKaxw

    Score
    1/10
    behavioral7behavioral8

    • Target

      XWorm/IconExtractor.dll

    • Size

      10KB

    • MD5

      640d8ffa779c6dd5252a262e440c66c0

    • SHA1

      3252d8a70a18d5d4e0cc84791d587dd12a394c2a

    • SHA256

      440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2

    • SHA512

      e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32

    • SSDEEP

      192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl

    Score
    1/10
    behavioral10behavioral9

    • Target

      XWorm/NAudio.dll

    • Size

      502KB

    • MD5

      3b87d1363a45ce9368e9baec32c69466

    • SHA1

      70a9f4df01d17060ec17df9528fca7026cc42935

    • SHA256

      81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451

    • SHA512

      1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7

    • SSDEEP

      6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS

    Score
    1/10
    behavioral11behavioral12

    • Target

      XWorm/Newtonsoft.Json.dll

    • Size

      695KB

    • MD5

      195ffb7167db3219b217c4fd439eedd6

    • SHA1

      1e76e6099570ede620b76ed47cf8d03a936d49f8

    • SHA256

      e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d

    • SHA512

      56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac

    • SSDEEP

      12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/

    Score
    1/10
    behavioral13behavioral14

    • Target

      XWorm/SimpleObfuscator.dll

    • Size

      1.4MB

    • MD5

      9043d712208178c33ba8e942834ce457

    • SHA1

      e0fa5c730bf127a33348f5d2a5673260ae3719d1

    • SHA256

      b7a6eea19188b987dad97b32d774107e9a1beb4f461a654a00197d73f7fad54c

    • SHA512

      dd6fa02ab70c58cde75fd4d4714e0ed0df5d3b18f737c68c93dba40c30376cc93957f8eef69fea86041489546ce4239b35a3b5d639472fd54b80f2f7260c8f65

    • SSDEEP

      24576:FDy7cKOfkiRrXP5WtJvW1mpjSWr7uoZme1V86:+8/AtJes1LJ

    Score
    1/10
    behavioral15behavioral16

    • Target

      XWorm/XWorm.About.Designer.cs

    • Size

      3KB

    • MD5

      a3392bedb255c468a06ea2bab472d985

    • SHA1

      eb3b277e2473e12905a6d1a603aa074f5968c17a

    • SHA256

      ee7bcb19743eab2dd3e5ede1c23e753e97a8499ecfa81a0d49a57b5e0fa8c4bc

    • SHA512

      6cdc1d2dbbbb28aa7167cd58198a50a59247e8818540f3542d8d6016bf0cc6089485579c8b4c1e235a8e1dca163ed589e56d96bc77b828cfae38cfe76335a455

    Score
    1/10
    behavioral17behavioral18

    • Target

      XWorm/XWorm.Abouts.Designer.cs

    • Size

      3KB

    • MD5

      1dbbc90e661d813a82b2c4b0a46cf3b2

    • SHA1

      7e4084383d31c61f0fa78b3ed590af1bca9647cd

    • SHA256

      aa0270f18cc4bb184896f4ffaf880df3d0bf7a46fccc7266268e2a95128e4b3d

    • SHA512

      c311f4d5a0baffba6a99886cb0c2a2a74b54c6bda87f68e1970424fd1aa8d73ff1d546a050b43063882e88849160f9056f815782a519b585437eea79b1691f23

    Score
    1/10
    behavioral19behavioral20

    • Target

      XWorm/XWorm.Builder.Designer.cs

    • Size

      4KB

    • MD5

      d78d90df0cce22709177b9e3030dd692

    • SHA1

      a4e5f84b44cd4a90cccb09a28a63b6b31f2a8ae1

    • SHA256

      d9db44cb375b10d1d97cb45237472da34617ef3fe5337949e767dca3c123e2dc

    • SHA512

      332dfeaa7bd610de0cecc6223a675fc29265c261a66cbfeaec7aac5cc2e3c9924754328bffe62ac31306c4089a355f462d8355d61567fb2ed50da7a07876a11f

    • SSDEEP

      96:qupdlU5KUIIHeNj/1R7TV1REr6pcY9zLpc4zLpcIzulLpc69zLpcG9ze:qcU8IHg/1BTV1+r6KWzLK4zLKIzwLK48

    Score
    1/10
    behavioral21behavioral22

    • Target

      XWorm/XWorm.Chat.Designer.cs

    • Size

      2KB

    • MD5

      3f8a1ba04c63706b08cc85ff9ed6e2d8

    • SHA1

      b318790505a205c56128ab4cdbaf3d481781560d

    • SHA256

      979aeac966794835f2773d1d55aff0d5de58487f58ecff54d35dbcb9029ed852

    • SHA512

      30c1c5b9775d84bd1532fccef5318177fdb6727a5a2bddcf64493eaa9e617c5cd7307002a6d459917dcec6d9462be942d12db20f53cb38c8d6c922520a2f983b

    Score
    1/10
    behavioral23behavioral24

    • Target

      XWorm/XWorm.Clipboard.Designer.cs

    • Size

      4KB

    • MD5

      9e5b460b737edee8ec07fe2154819a75

    • SHA1

      de8591077177e0b32e0b7007a86427cad7727415

    • SHA256

      18f6ffc0d0b6f3a65c47277b1da254ac4ca40ff7aed073edbd137f9f67b7112a

    • SHA512

      c0b23af18ff739f29a52a3f7312bd52829eb3157b45f1a2c75ab92a8a301e4f0702c34266ec57cdf4f92d3ec0b3e322ebf88bd19b2fd14e9f21102e1dc0b805a

    • SSDEEP

      96:qupdlU5KU9IHeNc1R7VV1REr6pciv9zLpc7H69zLpc3r69zLpce9ze:qcUZIHN1BVV1+r6KiFzLKszLKczLK8ze

    Score
    1/10
    behavioral25behavioral26

    • Target

      XWorm/XWorm.Clipper.Designer.cs

    • Size

      2KB

    • MD5

      461a5a5e621ddb3d52fc0b4163fe43ec

    • SHA1

      fddd9c8930e7b2c0d3f387ca89d1a83f06a9a55c

    • SHA256

      be62fce4f7d92f81399559e79945b4d0b57cff596ec8fe4ba492ea7c05cdefb5

    • SHA512

      989b535b01fdce5520713418dff0dc0fe98778ae69824805f858f0c849eb95896cf21a9d104cf88f2b6704986a1f844844b51e1a08bbef5d8552ffd283b5571c

    Score
    1/10
    behavioral27behavioral28

    • Target

      XWorm/XWorm.CustomOpen.Designer.cs

    • Size

      2KB

    • MD5

      45302640a55a27607769117ded818a51

    • SHA1

      aadb20e230c967e272eae6951411ef027fb30276

    • SHA256

      e7faa84fa69329f5b26893d1b4fe5e844ab9a4f1656f5434b6ddd64d2d243fde

    • SHA512

      502e3c07822eb2c67ddfd12f70fb9ec4ea88c14b7b21d8a23895ec4b0f984f442d552b5f01d1da566179f885e2105d3cbeecd956492ead1b6782c9a491283c1f

    Score
    1/10
    behavioral29behavioral30

    • Target

      XWorm/XWorm.DDosAttack.Designer.cs

    • Size

      2KB

    • MD5

      22cb648819f2e0f607c2764a714101d5

    • SHA1

      34fe9adda6849fe463cc3d8b7fd246c0d2079ad4

    • SHA256

      a5b75721d428abd0c2446e65850ad6acd50bfeaca06c5353c128c0ceeed1e266

    • SHA512

      15324cf192ab0c87a32d8dbe9239edf34ef21dc767c13f5b2e114c066af2d3b2ea448ccabc646443cf7c666dc52e48701875b1962afa2b110e9ab559835f6934

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks