Overview

overview

7

Static

static

7

XWorm V5.4 VIP.exe

windows7-x64

7

XWorm V5.4 VIP.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XWorm V5.4 VIP.exe

  • Size

    13.8MB

  • Sample

    250325-3edsgsxpy2

  • MD5

    065a8d7fad2ad13b9f04de982294eb21

  • SHA1

    7ecf3a3b1a0fa25f701787d98bd42c6f39c2f8ce

  • SHA256

    3b2f28e621af3ea54abf28071e2f36143a30aa87a091f0ee3764c15b2dea4303

  • SHA512

    0b828b1e545326258f46b7b0c535bfde1fff5ab4bf43bc729803a96e81f4b29a5d0e5a00e59ae392d517051dba37abd5f3b4dacc348242475cfa9e8cbfa16e34

  • SSDEEP

    196608:msZttF81Wco24/vt8Kf67RQCTbJev4Z4t2WL8PSlsZA6G:mEtM1VR4cRZ0QZaL8qlsZVG

Score
7/10
agilenet

Malware Config

Targets

    • Target

      XWorm V5.4 VIP.exe

    • Size

      13.8MB

    • MD5

      065a8d7fad2ad13b9f04de982294eb21

    • SHA1

      7ecf3a3b1a0fa25f701787d98bd42c6f39c2f8ce

    • SHA256

      3b2f28e621af3ea54abf28071e2f36143a30aa87a091f0ee3764c15b2dea4303

    • SHA512

      0b828b1e545326258f46b7b0c535bfde1fff5ab4bf43bc729803a96e81f4b29a5d0e5a00e59ae392d517051dba37abd5f3b4dacc348242475cfa9e8cbfa16e34

    • SSDEEP

      196608:msZttF81Wco24/vt8Kf67RQCTbJev4Z4t2WL8PSlsZA6G:mEtM1VR4cRZ0QZaL8qlsZVG

    Score
    7/10
    agilenet

    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks