stormkitty | 6b7c8ac18f492b4536307f4680cd40a9990bafc716d451575ba46c124c3f07b9

Sharing

Copy URL

Twitter E-mail

General

Target

XWorm V5.3 Bin.7z
Size

29.0MB
Sample

250129-ylhb2awqem
MD5

0ea984ec2d550a4205fabd911f973a6c
SHA1

71307409e69eb60fe612315e09d4109f91cf23c9
SHA256

6b7c8ac18f492b4536307f4680cd40a9990bafc716d451575ba46c124c3f07b9
SHA512

7bdb043850bbc32d41872b4090426e2193582b139e8be25972b25b9f9fe3a1c54e089a5738a78a804211031a010b8e9a6bd8d983cb534fb34d4a0f87e9484eba
SSDEEP

786432:WqVzpgbD+4aZ/INeMVKyBMtD2Op14tMIADxrHLfygiw:dgbD+XtFMVKyGUuI4ZHLfyK

Score

10^/10

stormkitty agilenet

Malware Config

Targets

- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/Cmstp-Bypass.dll
- Size
  
  11KB
- MD5
  
  cf15259e22b58a0dfd1156ab71cbd690
- SHA1
  
  3614f4e469d28d6e65471099e2d45c8e28a7a49e
- SHA256
  
  fa420fd3d1a5a2bb813ef8e6063480099f19091e8fa1b3389004c1ac559e806b
- SHA512
  
  7302a424ed62ec20be85282ff545a4ca9e1aecfe20c45630b294c1ae72732465d8298537ee923d9e288ae0c48328e52ad8a1a503e549f8f8737fabe2e6e9ad38
- SSDEEP
  
  192:KpXpS1QWlPkiqdE7FNNGGO9mWbpGkjgyaYcIW1vr/8TNU7aL7YiLsO08hdW5:Kp5IfL0mWbEkUyaYir/oNJL7KQ
Score

1^/10
behavioral1 behavioral2
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/FileManager.dll
- Size
  
  679KB
- MD5
  
  a7103c32512241abef49e11aabec554c
- SHA1
  
  b2ca76a6f3541a3a27713e5f6b7f70ec6fc7cb60
- SHA256
  
  307b0e613e8e7b61c64287790ab42f5c4e7c2d199d783e987c1a6a8eaa8c17f1
- SHA512
  
  b8e5de01df5bb25133e8a1d6fa23bc04b6a462ad77ff70f920d119041a322e368ad4a7d5d1d99de518d3ba53133ad000976e2f710159ecdffbb30021e18a0d9d
- SSDEEP
  
  12288:+8b+nFeDTzZTmRwm0G/Ot69fN0RXyPgnOIMJhnWkhr48vR:7ynF6mRwm0G/Ot6910NyPiOIMJhWk
Score

1^/10
behavioral3 behavioral4
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/FileSeacher.dll
- Size
  
  478KB
- MD5
  
  a1213775f91e5df436ea77795c34abb7
- SHA1
  
  c1d925587b500ea21e3f952ae5558678a5c4ba56
- SHA256
  
  d39dc7b128cf80028c6707db1c2a70b9d857b2415779d4f9c8ce6378129b671d
- SHA512
  
  377c89c44d13b3912a04fda986594001a6e3b9a9c0e0544e7d81b1f48d9b7f60b6c809a08061c8926005adaa1db2fc7a9f9c916b6e7cc438ee27657de682007c
- SSDEEP
  
  6144:x88L5lWTUVRTw/l97teGtSV41QJDsTDDh0Yhe6dwxLV/tuhgpn5XWRBI+WR:+zTUVRTw1lS4Ys50ie6Cf4gp2s
Score

1^/10
behavioral5 behavioral6
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/HBrowser.dll
- Size
  
  25KB
- MD5
  
  79f13be3582c42df73033819d093e1f8
- SHA1
  
  45c25633bfd0ab3c4f95b7137eb9671b911ea595
- SHA256
  
  f38e74a4bee2cf29d710d7c58eb83e548d92604621a8fb076bdc1e79714b9938
- SHA512
  
  e6e4331d26f35ac52d3524da0c6cdbb4bb36af54b57c61bce564bfec8663245bc7e5ff192c44a3c731e9ce7b83fdff40f274347a5241f6322833a92df944adb5
- SSDEEP
  
  768:GRTXKBL5/uElFr1TAeQR9bTbz+NYMoFBX:+TXKBLNuqLTORROYnFN
Score

1^/10
behavioral7 behavioral8
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/HRDP.dll
- Size
  
  1.7MB
- MD5
  
  e22910ace59c1207f6b2dd48e3a828c3
- SHA1
  
  3e00b75ae8fa1cb6e45eb45403908191a36b7e31
- SHA256
  
  41770e6bbc7f32b46237e6d2388ebf62b8f4dac40a19f024cead38f040ba139f
- SHA512
  
  dcc966489ad094d97a4689eddb13398445964e48543c832dea138f7eb1c5ec71984f12c6a789225e940f47d138fd9cd886c8e1693c30d92b054e3f7f2a401ad4
- SSDEEP
  
  24576:7dJrKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:7dkHZ5pdqYH8ia6GcKuR7
Score

1^/10
behavioral10 behavioral9
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/HVNC.dll
- Size
  
  59KB
- MD5
  
  00185e83cb7d4ae3be2d6c6b6a593c09
- SHA1
  
  a5ee25f87e2269968ea36447c4715545908931f9
- SHA256
  
  d747520cfbf096033d9dbdb684d84bc349555c4b33850b2e3763d22248595a84
- SHA512
  
  be9686be7c8d2ca12aec27cd14ec7c25b9f8b6be69cb70a95a1b19e5ef683e5e57b0a559bb8433df7eb0d009ec4ce77b436c12189a259e73880069fa5fa25bea
- SSDEEP
  
  768:m3VshHe3lgPOTxZz12BWR78Emepxx1JZ983O3jHRdIeYi2OPW9SQdHfiLXobeO:SqhHepTHz12BWR78E1jxzXbYuW36pO
Score

1^/10
behavioral11 behavioral12
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/HVNCMemory.dll
- Size
  
  40KB
- MD5
  
  c6c82e028f324ae74a06b87083c3060a
- SHA1
  
  c3f1e9db7c4df64fa0a9c6738d0808eb89909e00
- SHA256
  
  604feb4b3d6504984f1b5d26c7fe666b0203139b24142d38d6ca8592a07d165b
- SHA512
  
  58705e91e16920c236ae8c0ab1c4d5edf3824cdf8fda4d6b7d55c96b506dc9893eba2864751693304e4dcf5d1e3992958ab1db48b227c94150adb00ade753088
- SSDEEP
  
  768:IWcY/bnIUtAN6K/8cXRQGU1YKa79oQog1zq+RPz:IDQ8WAbX1U1YKYo8XL
Score

1^/10
behavioral13 behavioral14
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/HiddenApps.dll
- Size
  
  45KB
- MD5
  
  c5efa70a04a026b9a2fa97b1ea43e840
- SHA1
  
  aab2de0ab74c12e04256ff2b113b062dc93179e6
- SHA256
  
  f9ef7709f34e944d99ca5bef6af1524d7cf3889894084b7ae61e9202f267a728
- SHA512
  
  1348d4ebd3ac5b56eb32820ee14f9aee20a43b7dc3d06dd7fd62c8f227b12a27d0c0376c7d858e78315cd92d17e588bc2e37648c04d146530db706e8b3c4ff1d
- SSDEEP
  
  768:zy37gsdDvMZ9+rdm2KExqbMYRQpWk/x0qqBi3X/G0gpfN3ff2oA:idDvML+r/rqbMYRQpl/x5qI/dEdX2J
Score

1^/10
behavioral15 behavioral16
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/Informations.dll
- Size
  
  22KB
- MD5
  
  43f97998b054cb248d3ef542f3d2a35c
- SHA1
  
  5910d4bef19e86f2e2bcafac5ef05f35919b90c1
- SHA256
  
  79644e42a221cfd23fb739cfff8ac733eae42bff5193be1027776658c7b8af01
- SHA512
  
  8a9186897a94e5f5e07f65e8f7f37053e0f8d6f50dd4df1552e043ec69ebf992dc8221a3e1cfafed7a52cdfa1b4f3a00056634387859e4ee9dd9db80e7b9052a
- SSDEEP
  
  384:j4svJAz5thUNHcxxypeGQ/0n3TmyxhxJNSLSg48jjoZ:j4suz/LypeGQEjfNSlM
Score

1^/10
behavioral17 behavioral18
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/Keylogger.dll
- Size
  
  17KB
- MD5
  
  51f7650a8e5c4ed1b2c87632217a8cbb
- SHA1
  
  472f062b4cb066ed43fd7e04a7f4ef199f3b0faa
- SHA256
  
  cf7f8e7a469ec590e4ab1b93bed0e3dcbb57976b9fcb5ce506adc258981210a3
- SHA512
  
  6465336daa8014ef4214d92d6eb6312603b82eab8b43ce4ba3eade36424f4bae93bca30a9d5e07ec6c0a71f6f6438b8fd8a0dab9f8d721ab882df0b167141084
- SSDEEP
  
  192:PCK9HKDyS0+NKdUxEIj1aq8fgYO1Lnq4Ur1XneDN6IW1Y6Up91KTN10UbnnSL2CV:p5Oe+4dw1IDMO4U5uD8UpiH0yZCV
Score

1^/10
behavioral19 behavioral20
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/Maps.dll
- Size
  
  15KB
- MD5
  
  5f014f5068dccbeeee7f17d4c11b23fe
- SHA1
  
  a481d85b8f002d83c3b682b9881e297705a0caac
- SHA256
  
  66970870826f8fd29ddeda63d21a65b4b5a51e08a733ec1f79e28eb84053ab0d
- SHA512
  
  980f7fa8b379cfd95e717b1fc4fd0c0d89c881c94a6de98c914f6b163b4cddd67d0fd87d76964eee5c523d5054cc0b8043b899af6d3e3f326c77c3a68b9ad703
- SSDEEP
  
  384:yHC+Q4WPRdJElcjp8J4jtepa9BX/bV9E2:yHCbRdWle2C5x/Z6
Score

1^/10
behavioral21 behavioral22
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/MessageBox.dll
- Size
  
  15KB
- MD5
  
  90aa613d71db75f163dc663fa4aab426
- SHA1
  
  be5a9cbed1bc4aac0d26b175171886d9fca8b867
- SHA256
  
  04b8372d5bafef3ee5e977916e3fce06b56a9a0b80bdc46b82b024debce243bf
- SHA512
  
  7b06a09f58c80fc6148eec29679f1f32a9dcef5058a91ef01d77e8ba9e548fb40bc871283130ec920bab24d2280164d225d529fa199cd7a0e0ec547bc0724155
- SSDEEP
  
  192:jpDQ4tBCjRD6W2Y7gF/OF2glT/9r169G3m6IW1mX/j0rsVHvJsJeDdZKML2vW9:RQcRW2UVT/95gG3UX/jPZyvW9
Score

1^/10
behavioral23 behavioral24
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/Microphone.dll
- Size
  
  540KB
- MD5
  
  37c46c880fb24e2be87166931abc47dd
- SHA1
  
  feec96c09eefb4bf4845a5c59e2325168ab752c0
- SHA256
  
  1558e9689479a91a15462668286907e5f9637028e91efeac73c236db38031ba0
- SHA512
  
  f207cebad91bf0c91ca71e33d4dbd47b16414037ad2e19f46f5780d94690a56b26347135a952f22697bcb08c3931ad2f4a3e9c42cec8f60e0eb2e163edf02c28
- SSDEEP
  
  6144:lF8i30ykMPoxBemtSQvAVYm8Ou/JgtKMV6fb78+Ommg8YCQ18aF6RWAdoYCY8gQg:LP32emtLAV8OXebgreLxAwuaruedUB
Score

1^/10
behavioral25 behavioral26
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/Ngrok-Disk.dll
- Size
  
  7.0MB
- MD5
  
  fa5cd4ac08d473affa2b9c52679bc3bd
- SHA1
  
  884ece01f33fc850bc658fc891a4bb7f12e834aa
- SHA256
  
  6f669364bd077024b5afb1f3ac3d5d4c08ec594d71160559b6ffe8c6e1a6f57c
- SHA512
  
  667d79e7884b36c415beb2895adb088d3850a007c757d3252791709216ac678e7a79389300647e6baa5bfd688fbcceca9215806063c7cf74089fd4500ebe4362
- SSDEEP
  
  196608:ICsxED7kwTV6B/nCR7+AA3e5MryK5Rj1Bpw7Vdjz8wEO+Dl:ITED7/VEqt/A3TryARj1BpwLktl
Score

1^/10
behavioral27 behavioral28
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/Options.dll
- Size
  
  30KB
- MD5
  
  adad703b79ec134788beb2887e96fea4
- SHA1
  
  0f1bd6a021351526480656bb2bc3fb41bf9fce35
- SHA256
  
  bf3ba1b0c2e90a0d7fb10f5d6a556818c09768e215e4d714fd7e562ec5a9792a
- SHA512
  
  e995201ffa6990f55c0e6e3cb253355ac258426a0fe0bd5ea53d41d6b63388dc608277887c0747e243e32d6d2fc2dc3e0ab31174c9fb3f78c0535fdd860694fd
- SSDEEP
  
  768:BLxkuz7dDWH839iybgkf/sGRNW949dhjcI:BLNHqUPbgQsGRNW949
Score

1^/10
behavioral29 behavioral30
- Target
  
  XWorm V5.3 Bin/XWorm V5.3 Optimized Bin/Plugins/Pastime.dll
- Size
  
  17KB
- MD5
  
  8462b1c10b7ad3afd919412b12d81ed3
- SHA1
  
  81c05b3eea17b660f0a825f97d2e394ad12b1521
- SHA256
  
  b1fbf33f07534254fcc924fbc29babb8d692d345cf586edb9cb85478083eaec7
- SHA512
  
  ed2fd57737f75f254b748d9733047d687c83be2340bfb499cf1efe48a5b7d8860abbe755dbe9e03c100b0cabbb3405499ea8fac20e2feb0b99b57adc2408f5d7
- SSDEEP
  
  384:REoxsRLvyUi4U4R7XonhJAH+epi5zOY7//ZlusA8/fT1:REoKVvri4UA7YnEnwr/1A8/fh
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32