Extracted

Extracted

• • Target
    DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/001_CITACION DEMANDA JUZGADO PENAL.PDF.exe
  • Size 467KB
  • SHA256 0a0080a0cc608758bdc49748b1b4df67127f35fe42cd153658b6ee481f599705
  • MD5 4775e20da779c200c3faabbd63e43696
  • SHA1 2f3680c9e95d4ca259c6c40b511789c101ae1161
  • SHA512 3984a9d0995200b162b50f642ab3c9d79fcbafc12f164d9595eb549b0bcddfd81366a8779a9e819797dbbe1769c0246b2a244c0d4599b47275483117d9b50c2a
  • SSDEEP 6144:WFQ8DQMyGlgnThrlZlxev93W763Ye2zMv2wojpVP4JwXYCwdoY0dQSmyoIZhE+tb:wJsHxeVGbFMQP4JwIhoJtmoi+tute
  • TLSH
    T170A40223732EA032E56092344C61DF475837F929A77136D3F284DA3A18727D69D3A93E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryxwormrattrojan

  • Detect Xworm Payload

  • Xworm

    Xworm is a remote access trojan written in C#.

    trojanratxworm

  • Xworm family

    xworm

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2
• • Target
    DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/MSVCP140.dll
  • Size 439KB
  • SHA256 5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
  • MD5 5ff1fca37c466d6723ec67be93b51442
  • SHA1 34cc4e158092083b13d67d6d2bc9e57b798a303b
  • SHA512 4802ef62630c521d83a1d333969593fb00c9b38f82b4d07f70fbd21f495fea9b3f67676064573d2c71c42bc6f701992989742213501b16087bb6110e337c7546
  • SSDEEP 12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
  • TLSH
    T1C9A43A22BB464DF2E59E53B671C5532187F5FC250360E3C393EAE0296F662C2A733691
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral3behavioral4
• • Target
    DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/Qt5Core.dll
  • Size 5.1MB
  • SHA256 b967ade09a9338320e0db4e5da11a2ac396950f0eed689b28bd31686b7baf018
  • MD5 b517914bd1779b312611b5a52b0ef24a
  • SHA1 5d7ee138e70eca65d35a76bd2285453a764daaf6
  • SHA512 cab8a6a8b4c8eca738348812e530e5b186a88a08f65949753e6bdcc3c7bf1ffa79fa48ae718be4173b14ca4a3b6fbb0af240c800fbd426989d8a0ae7646425f5
  • SSDEEP 98304:53QkIHj14FdDhqJsv6tWKFdu9CjzHveRnZyxEdm4:5gdnJsv6tWKFdu9CjzHeH
  • TLSH
    T196369E917F978176E5A2D270C87B671F4029E9024B1245CBD3DC360A9A79AE13F3B70B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral5behavioral6
• • Target
    DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/Qt5Gui.dll
  • Size 5.7MB
  • SHA256 ab160992f30dc69b97feedd2fcaf7528a56fc98a3f30a166c1076589340ac8be
  • MD5 c4a857dee5656921baba1e19d2b099b6
  • SHA1 7e3e634d5b2f101ea2838ec2c13158113ce33e62
  • SHA512 8456610a8d84606ec5784dca12b1ed34ceee6e7c716871db4165fc0ca9042fae097fe0c37afb645eab860cd09d1d559fe6a8040a980387ef425d9af366441e53
  • SSDEEP 98304:+8oNJzx4w24LwWotu+PNlwL9PmEZ23CeG:kBbUuCPwNj2Cb
  • TLSH
    T1DE563BD1B1827173C9A2D2BE670F663F9077A956C34483C38699AF8554703FA0F7BA06
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral7behavioral8
• • Target
    DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/Qt5Network.dll
  • Size 1.1MB
  • SHA256 a811f1797585235aee3b4d47457f661d6a2dcb3664f1136c79b8c478c7a0b479
  • MD5 b0f294b423165cc8585a4ea7bc37b0a9
  • SHA1 2703bfdccc895845694c67cbc0a117f0993e6136
  • SHA512 585726c1415013ea2afe73ca1752396ea6a9c5b9a7895064df2562bb71981fa2d8b5acdf9b98862b0429cb47afd0680ce57d3afa2aa097a25153a9be9302f793
  • SSDEEP 24576:ONfY4/b8d22Gmou3ZjRkjZgUPiV69DrOMxpbDc06GQVzKa2:qAd22GrziVazDcKv
  • TLSH
    T1F9355B62F38304F2F88951B5891ABF7BCA3BB214471656C7EA0C6EC6D9917C1193F1CA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral10behavioral9
• • Target
    DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/Qt5Widgets.dll
  • Size 4.4MB
  • SHA256 4a12866260ff266eeffe0b4d8eaf27ed064682f00e8907bd53956f446e23c496
  • MD5 eb4aea9ff7c75da2a4925e83f8defe3e
  • SHA1 efa4566fb9e7a4de722a177956dff0f43d88638a
  • SHA512 42fb74b3a1e08e2652c8a0459eb04e3b21446f82be4c07736a08d2d20f681781201154c9e48dadd55118c8ed2b53e324ef1708e36e169458ddaa57d21d6a4cd3
  • SSDEEP 98304:n1CmFlF05UMNO1ulAjhDfTbz7quDp+bXa6gYzdkSPD1UZlH6uV75uDdHBclxooGJ:Rf59iJ5n
  • TLSH
    T136267D93F6C242B1D8D6C178495F6B63CA36B0CB4B9552E7D38DEF4664202E02E7F246
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral11behavioral12
• • Target
    DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/Qt5Xml.dll
  • Size 150KB
  • SHA256 398f670ea5dc065e7796346bca1c2ad5d2c01b1325a93e82ef921f5f36769d06
  • MD5 d2ec84fdfea3f694a3b8415e1dc61ad2
  • SHA1 511fa6f7e2e3d9596542f91cd297eacec75f499b
  • SHA512 deaa75577c7e2553f16499977d170831ca87a140bb0d7a1ea515f2c6df0372c180acf416aee720123351e8eb71c534585bb509c13b073ba332141b643b60ad8f
  • SSDEEP 3072:TcxDXrgrVb0x+ULoJ0yDqM8NlJ0cJnIGUAH22lt54kxzEs:gxDXrgxb0AHqyD6lnXt54k1
  • TLSH
    T1BAE319F2726542A2F0B382341C5F5A3EEA7FE91C43B542D3E35D6D2389246E15E3B246
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral13behavioral14
• • Target
    DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/VCRUNTIME140.dll
  • Size 78KB
  • SHA256 8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
  • MD5 a37ee36b536409056a86f50e67777dd7
  • SHA1 1cafa159292aa736fc595fc04e16325b27cd6750
  • SHA512 3a7c260646315cf8c01f44b2ec60974017496bd0d80dd055c7e43b707cadba2d63aab5e0efd435670aa77886ed86368390d42c4017fc433c3c4b9d1c47d0f356
  • SSDEEP 1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
  • TLSH
    T104839E12B4D140BFC5668470527AEE036B3D9A610BE58EDB6F98AD841F79BC2E730217
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral15behavioral16