General

  • Target

    XWorm V5.0.rar

  • Size

    29.4MB

  • MD5

    88e60256792f6294b0758ccaa2039ebb

  • SHA1

    956c2e5c56b70e411c3d7571a47c4d98336750f7

  • SHA256

    d4d60f2b5700a42ce59b0c449fe44532d08c81bc0aa1a68fd9f93eef1f42d4f7

  • SHA512

    e65646d957ce58ac1a3b19f21bf1351953751a60a1febc76f49d2e658d958e579479bdbdcf25e3d47ce161ad8cac25c3531924effb59bfb6fa3ddbf5c8249b00

  • SSDEEP

    786432:oy+YS3/Hxn8Op25INyrYl4MrK2i9UKuAb:+FfWv5+yreZZif

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 52 IoCs

    Checks for missing Authenticode signature.

Files

  • XWorm V5.0.rar
    .rar

    Password: hack1ngt0ols

  • XWorm V5.0/Background.png
    .png

    Password: hack1ngt0ols

  • XWorm V5.0/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    Password: hack1ngt0ols

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Fixer.bat
  • XWorm V5.0/GMap.NET.Core.dll
    .dll windows:4 windows x86 arch:x86

    Password: hack1ngt0ols

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/GMap.NET.WindowsForms.dll
    .dll windows:4 windows x86 arch:x86

    Password: hack1ngt0ols

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/GeoIP.dat
  • XWorm V5.0/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    Password: hack1ngt0ols

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • XWorm V5.0/IconExtractor.dll
    .dll windows:4 windows x86 arch:x86

    Password: hack1ngt0ols

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Icons/icon (1).ico
  • XWorm V5.0/Icons/icon (10).ico
  • XWorm V5.0/Icons/icon (11).ico
  • XWorm V5.0/Icons/icon (12).ico
  • XWorm V5.0/Icons/icon (13).ico
  • XWorm V5.0/Icons/icon (14).ico
  • XWorm V5.0/Icons/icon (15).ico
  • XWorm V5.0/Icons/icon (16).ico
  • XWorm V5.0/Icons/icon (17).ico
  • XWorm V5.0/Icons/icon (2).ico
  • XWorm V5.0/Icons/icon (3).ico
  • XWorm V5.0/Icons/icon (4).ico
  • XWorm V5.0/Icons/icon (5).ico
  • XWorm V5.0/Icons/icon (6).ico
  • XWorm V5.0/Icons/icon (7).ico
  • XWorm V5.0/Icons/icon (8).ico
  • XWorm V5.0/Icons/icon (9).ico
  • XWorm V5.0/Mono.Cecil.Mdb.dll
    .dll windows:4 windows x86 arch:x86

    Password: hack1ngt0ols

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Mono.Cecil.Pdb.dll
    .dll windows:4 windows x86 arch:x86

    Password: hack1ngt0ols

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Mono.Cecil.Rocks.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Mono.Cecil.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/MonoMod.Backports.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/MonoMod.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/MonoMod.ILHelpers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/MonoMod.Iced.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/MonoMod.Utils.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/NAudio.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/ActiveWindows.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/All-In-One.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Chat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Clipboard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/FileManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/FileSeacher.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/HRDP.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/HVNC.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/HVNCMemory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Informations.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Keylogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Maps.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/MessageBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Microphone.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Ngrok-Disk.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Options.dll
    .dll .ps1 windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Pastime.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Performance.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/ProcessManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Programs.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Ransomware.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Recovery.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Regedit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/RemoteDesktop.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/ReverseProxy.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/RunPE.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/ServiceManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/Shell.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/StartupManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/TCPConnections.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/UACBypass.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/VB.NET Compiler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/WSound.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Plugins/WebCam.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/RVGLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Readme.txt
  • XWorm V5.0/SimpleObfuscator.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • XWorm V5.0/Sounds/Chat.wav
  • XWorm V5.0/Sounds/Intro.wav
  • XWorm V5.0/XWorm V5.0.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • XWorm V5.0/XWorm V5.0.exe.config
    .xml
  • XWorm V5.0/XWormLoader.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • XWorm V5.0/crack.exe
    .exe windows:5 windows x86 arch:x86

    2cc68961dd8a09287e908343d46b30d4


    Headers

    Imports

    Sections