Overview
overview
10Static
static
10XWorm-5.6-main.zip
windows7-x64
1XWorm-5.6-main.zip
windows10-2004-x64
1XWorm-5.6-...DME.md
windows7-x64
3XWorm-5.6-...DME.md
windows10-2004-x64
3XWorm-5.6-....6.zip
windows7-x64
1XWorm-5.6-....6.zip
windows10-2004-x64
1FastColore...ox.dll
windows7-x64
1FastColore...ox.dll
windows10-2004-x64
1Fixer.bat
windows7-x64
1Fixer.bat
windows10-2004-x64
5GMap.NET.Core.dll
windows7-x64
1GMap.NET.Core.dll
windows10-2004-x64
1GMap.NET.W...ms.dll
windows7-x64
1GMap.NET.W...ms.dll
windows10-2004-x64
1Guna.UI2.dll
windows7-x64
1Guna.UI2.dll
windows10-2004-x64
1IconExtractor.dll
windows7-x64
1IconExtractor.dll
windows10-2004-x64
1NAudio.dll
windows7-x64
1NAudio.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Plugins/Ac...ws.dll
windows7-x64
1Plugins/Ac...ws.dll
windows10-2004-x64
1Plugins/Chat.dll
windows7-x64
1Plugins/Chat.dll
windows10-2004-x64
1Plugins/Chromium.dll
windows7-x64
1Plugins/Chromium.dll
windows10-2004-x64
1Plugins/Clipboard.dll
windows7-x64
1Plugins/Clipboard.dll
windows10-2004-x64
1Plugins/Cm...ss.dll
windows7-x64
1Plugins/Cm...ss.dll
windows10-2004-x64
1General
-
Target
XWorm-5.6-main.zip
-
Size
17.4MB
-
Sample
250203-xswbss1rdm
-
MD5
f8766a4d7853f38b9a5cb8b9e7e601a0
-
SHA1
23eb644f84f35180aaf334f00659e8b907b45833
-
SHA256
09630f5f1a47d6fe6b02d74de4c077876b6c607c183e241e82e72d10fb4c0ea0
-
SHA512
65dbea03faa6f50d454292cbccd51ca099ab82bb56136643df69ea4790a842464a99cce79a26b8d1813be221bd4486c7c16d7b14597f269e0f2030f2d2f2574a
-
SSDEEP
393216:wA1udbqUg2idC/kZz9g+430arKdAcXrO5VyAEBQ2T0ORhk:wCXUg2IhZS65rO5V8BQS04hk
Behavioral task
behavioral1
Sample
XWorm-5.6-main.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
XWorm-5.6-main.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
XWorm-5.6-main/README.md
Resource
win7-20241023-en
Behavioral task
behavioral4
Sample
XWorm-5.6-main/README.md
Resource
win10v2004-20250129-en
Behavioral task
behavioral5
Sample
XWorm-5.6-main/XWorm 5.6.zip
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
XWorm-5.6-main/XWorm 5.6.zip
Resource
win10v2004-20250129-en
Behavioral task
behavioral7
Sample
FastColoredTextBox.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
FastColoredTextBox.dll
Resource
win10v2004-20250129-en
Behavioral task
behavioral9
Sample
Fixer.bat
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Fixer.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
GMap.NET.Core.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
GMap.NET.Core.dll
Resource
win10v2004-20250129-en
Behavioral task
behavioral13
Sample
GMap.NET.WindowsForms.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
GMap.NET.WindowsForms.dll
Resource
win10v2004-20250129-en
Behavioral task
behavioral15
Sample
Guna.UI2.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Guna.UI2.dll
Resource
win10v2004-20250129-en
Behavioral task
behavioral17
Sample
IconExtractor.dll
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
IconExtractor.dll
Resource
win10v2004-20250129-en
Behavioral task
behavioral19
Sample
NAudio.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
NAudio.dll
Resource
win10v2004-20250129-en
Behavioral task
behavioral21
Sample
Newtonsoft.Json.dll
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Plugins/ActiveWindows.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Plugins/ActiveWindows.dll
Resource
win10v2004-20250129-en
Behavioral task
behavioral25
Sample
Plugins/Chat.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Plugins/Chat.dll
Resource
win10v2004-20250129-en
Behavioral task
behavioral27
Sample
Plugins/Chromium.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Plugins/Chromium.dll
Resource
win10v2004-20250129-en
Behavioral task
behavioral29
Sample
Plugins/Clipboard.dll
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
Plugins/Clipboard.dll
Resource
win10v2004-20250129-en
Behavioral task
behavioral31
Sample
Plugins/Cmstp-Bypass.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Plugins/Cmstp-Bypass.dll
Resource
win10v2004-20250129-en
Malware Config
Extracted
njrat
<- NjRAT 0.7d Horror Edition ->
By AFlatoN
147.185.221.22:40639
b2e31adf64af873c0fa30a8ea1b8e5b8
-
reg_key
b2e31adf64af873c0fa30a8ea1b8e5b8
-
splitter
Y262SUCZ4UJJ
Targets
-
-
Target
XWorm-5.6-main.zip
-
Size
17.4MB
-
MD5
f8766a4d7853f38b9a5cb8b9e7e601a0
-
SHA1
23eb644f84f35180aaf334f00659e8b907b45833
-
SHA256
09630f5f1a47d6fe6b02d74de4c077876b6c607c183e241e82e72d10fb4c0ea0
-
SHA512
65dbea03faa6f50d454292cbccd51ca099ab82bb56136643df69ea4790a842464a99cce79a26b8d1813be221bd4486c7c16d7b14597f269e0f2030f2d2f2574a
-
SSDEEP
393216:wA1udbqUg2idC/kZz9g+430arKdAcXrO5VyAEBQ2T0ORhk:wCXUg2IhZS65rO5V8BQS04hk
Score1/10 -
-
-
Target
XWorm-5.6-main/README.md
-
Size
69B
-
MD5
ebdeae924843df1353737ec94bdd7425
-
SHA1
d340007cafd7240c2db2ebe77b579c511fc8127f
-
SHA256
fde4b893d6c965e6fc05e1a924dc751fd401aecc9eeaf10f3dacaab6556ced2a
-
SHA512
d3d928f5d5ecb0f2501751a0f4d93173495b2dc3560fbe844c1efa49ae42a42531ab2b07fd3dc7aef5e5fabff5d621f85c6e5be39c6e0ad5d5e9a0f827ca9bed
Score3/10 -
-
-
Target
XWorm-5.6-main/XWorm 5.6.zip
-
Size
17.4MB
-
MD5
69df77ff7a55fbcbf97200066f79e6ab
-
SHA1
59f0b96c823a86590429b16fc3d348922a993c49
-
SHA256
1e375f8854533938ed2823a0116c5eee9532f8be5da4b4510061043d8d7e5ceb
-
SHA512
09585915ceec6183aaa3b945da61587ea14c7fd0079cde6287c0d5e58cae1b817fdedd3c4b64efc101b724db7c52a03b89230bce78e516301ae13a2ba45f1dc0
-
SSDEEP
393216:2ECt9WHkSLozx3Xd8i8yxmsxdeaPWrUMsOo4XeE+3QexeuXHw:2EHHkSLoVei6Var4X23QgeyHw
Score1/10 -
-
-
Target
FastColoredTextBox.dll
-
Size
333KB
-
MD5
b746707265772b362c0ba18d8d630061
-
SHA1
4b185e5f68c00bef441adb737d0955646d4e569a
-
SHA256
3701b19ccdac79b880b197756a972027e2ac609ebed36753bd989367ea4ef519
-
SHA512
fd67f6c55940509e8060da53693cb5fbac574eb1e79d5bd8f9bbd43edbd05f68d5f73994798a0eed676d3e583e1c6cde608b54c03604b3818520fa18ad19aec8
-
SSDEEP
6144:4FErOIif3RzSHh+20lXs1TzCeBcQeDbNlz7:eEeR52bmeh0n
Score1/10 -
-
-
Target
Fixer.bat
-
Size
122B
-
MD5
2dabc46ce85aaff29f22cd74ec074f86
-
SHA1
208ae3e48d67b94cc8be7bbfd9341d373fa8a730
-
SHA256
a11703fd47d16020fa099a95bb4e46247d32cf8821dc1826e77a971cdd3c4c55
-
SHA512
6a50b525bc5d8eb008b1b0d704f9942f72f1413e65751e3de83d2e16ef3cf02ef171b9da3fff0d2d92a81daac7f61b379fcf7a393f46e914435f6261965a53b3
Score5/10-
Drops file in System32 directory
-
-
-
Target
GMap.NET.Core.dll
-
Size
2.9MB
-
MD5
819352ea9e832d24fc4cebb2757a462b
-
SHA1
aba7e1b29bdcd0c5a307087b55c2ec0c7ca81f11
-
SHA256
58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86
-
SHA512
6a5b0e1553616ea29ec72c12072ae05bdd709468a173e8adbdfe391b072c001ecacb3dd879845f8d599c6152eca2530cdaa2c069b1f94294f778158eaaebe45a
-
SSDEEP
49152:ot12Gb/hz7ZsK9qY5uyUW57VC4IB1+fXhQ1hyCzMw/22fSg7gjxhUE/nbTC0xemh:oLbteKb57W1+PhQ1HM1gmJ/SZmh
Score1/10 -
-
-
Target
GMap.NET.WindowsForms.dll
-
Size
147KB
-
MD5
32a8742009ffdfd68b46fe8fd4794386
-
SHA1
de18190d77ae094b03d357abfa4a465058cd54e3
-
SHA256
741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365
-
SHA512
22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b
-
SSDEEP
3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ
Score1/10 -
-
-
Target
Guna.UI2.dll
-
Size
1.9MB
-
MD5
bcc0fe2b28edd2da651388f84599059b
-
SHA1
44d7756708aafa08730ca9dbdc01091790940a4f
-
SHA256
c6264665a882e73eb2262a74fea2c29b1921a9af33180126325fb67a851310ef
-
SHA512
3bfc3d27c095dde988f779021d0479c8c1de80a404454813c6cae663e3fe63dc636bffa7de1094e18594c9d608fa7420a0651509544722f2a00288f0b7719cc8
-
SSDEEP
24576:FIVZLRYIVQd9INo3FDbWX7SsOobBTEAjg+m+ZFNwaxwGoHQ/jzK+:+oWodbi9XFEAjg+m+ZFKaxw
Score1/10 -
-
-
Target
IconExtractor.dll
-
Size
10KB
-
MD5
640d8ffa779c6dd5252a262e440c66c0
-
SHA1
3252d8a70a18d5d4e0cc84791d587dd12a394c2a
-
SHA256
440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
-
SHA512
e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32
-
SSDEEP
192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl
Score1/10 -
-
-
Target
NAudio.dll
-
Size
502KB
-
MD5
3b87d1363a45ce9368e9baec32c69466
-
SHA1
70a9f4df01d17060ec17df9528fca7026cc42935
-
SHA256
81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
-
SHA512
1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
-
SSDEEP
6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
Score1/10 -
-
-
Target
Newtonsoft.Json.dll
-
Size
695KB
-
MD5
195ffb7167db3219b217c4fd439eedd6
-
SHA1
1e76e6099570ede620b76ed47cf8d03a936d49f8
-
SHA256
e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
-
SHA512
56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
-
SSDEEP
12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
Score1/10 -
-
-
Target
Plugins/ActiveWindows.dll
-
Size
14KB
-
MD5
5a766a4991515011983ceddf7714b70b
-
SHA1
4eb00ae7fe780fa4fe94cedbf6052983f5fd138b
-
SHA256
567b9861026a0dbc5947e7515dc7ab3f496153f6b3db57c27238129ec207fc52
-
SHA512
4bd6b24e236387ff58631207ea42cd09293c3664468e72cd887de3b3b912d3795a22a98dcf4548fb339444337722a81f8877abb22177606d765d78e48ec01fd8
-
SSDEEP
384:vRt5r7olU5QrGPbMrodT8ptsY7XZ1EDI6:vRtSRrGPb9t0Z1ED7
Score1/10 -
-
-
Target
Plugins/Chat.dll
-
Size
18KB
-
MD5
59f75c7ffaccf9878a9d39e224a65adf
-
SHA1
46b0f61a07e85e3b54b728d9d7142ddc73c9d74b
-
SHA256
aab20f465955d77d6ec3b5c1c5f64402a925fb565dda5c8e38c296cb7406e492
-
SHA512
80056163b96ce7a8877874eaae559f75217c0a04b3e3d4c1283fe23badfc95fe4d587fd27127db4be459b8a3adf41900135ea12b0eeb4187adbcf796d9505cb8
-
SSDEEP
384:4MOna4ifKQtuUvl0BY0iYUsBG/crwTKvh6GIKoIafWUWmfN:vKQtuq2Y0lUUG0r0pIafWXe
Score1/10 -
-
-
Target
Plugins/Chromium.dll
-
Size
32KB
-
MD5
edb2f0d0eb08dcd78b3ddf87a847de01
-
SHA1
cc23d101f917cad3664f8c1fa0788a89e03a669c
-
SHA256
b6d8bccdf123ceac6b9642ad3500d4e0b3d30b9c9dd2d29499d38c02bd8f9982
-
SHA512
8f87da834649a21a908c95a9ea8e2d94726bd9f33d4b7786348f6371dfae983cc2b5b5d4f80a17a60ded17d4eb71771ec25a7c82e4f3a90273c46c8ee3b8f2c3
-
SSDEEP
768:6SyQlmUmBlEu0FXfjq2sgDrLjfcVJ5sN9aWdMIxbKhJ+GEq3ZsL5f62:3yQltmBlmFXfjq2sgDrLjfcVJ5sNkQOa
Score1/10 -
-
-
Target
Plugins/Clipboard.dll
-
Size
14KB
-
MD5
831eb0de839fc13de0abab64fe1e06e7
-
SHA1
53aad63a8b6fc9e35c814c55be9992abc92a1b54
-
SHA256
e31a1c2b1baa2aa2c36cabe3da17cd767c8fec4c206bd506e889341e5e0fa959
-
SHA512
2f61bcf972671d96e036b3c99546cd01e067bef15751a87c00ba6d656decb6b69a628415e5363e650b55610cf9f237585ada7ce51523e6efc0e27d7338966bee
-
SSDEEP
192:xh23MTInqHX7qRlrZk1/X7eOFXgNTer149iY6IW1mX/YWMqS7RSLOIU:cTWElV0/X7eUSTe5Wi2X/ShIU
Score1/10 -
-
-
Target
Plugins/Cmstp-Bypass.dll
-
Size
11KB
-
MD5
cf15259e22b58a0dfd1156ab71cbd690
-
SHA1
3614f4e469d28d6e65471099e2d45c8e28a7a49e
-
SHA256
fa420fd3d1a5a2bb813ef8e6063480099f19091e8fa1b3389004c1ac559e806b
-
SHA512
7302a424ed62ec20be85282ff545a4ca9e1aecfe20c45630b294c1ae72732465d8298537ee923d9e288ae0c48328e52ad8a1a503e549f8f8737fabe2e6e9ad38
-
SSDEEP
192:KpXpS1QWlPkiqdE7FNNGGO9mWbpGkjgyaYcIW1vr/8TNU7aL7YiLsO08hdW5:Kp5IfL0mWbEkUyaYir/oNJL7KQ
Score1/10 -