donutloader | 4753c3353ac0f9c0848bd319bb8d76c513a657fd071be91634bf7e40e2311e80

Sharing

Copy URL Twitter E-mail

General

Target
Unalty.fun.fun7
Size 18.7MB
Sample260527-pammyae191
SHA256 4753c3353ac0f9c0848bd319bb8d76c513a657fd071be91634bf7e40e2311e80
MD5 2ad3f14cad2d7e511e35380828e08043
SHA1 7aa41c4d945b029e250cc9bce64ac306d6bd4f9b
SHA512 1dc607e69cca99cd8f08d1ff83491f80e6b4df3bc0a61a9e0e44555bcb90273fd9e76c41e07ce64b0b72fbce770ea33f9b6c9c59e6b2a3275aa6aff47b09958f
SSDEEP 393216:Yy4PdOeQ1m6CeqLRxeeyxFzMGKt3fmazVP+8zDc3ta4hlT3Kd4tj:oxma5RHe5M3fmqP9HO9hlQMj
TLSH
T1EF1733FBCE097D53551349695402D223FF6400AEBBFF127ED80AFA8A096E31097E8795
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Xworm 6.4 Nobackdoor/FastColoredTextBox.dll
- Size 333KB
- SHA256 3701b19ccdac79b880b197756a972027e2ac609ebed36753bd989367ea4ef519
- MD5 b746707265772b362c0ba18d8d630061
- SHA1 4b185e5f68c00bef441adb737d0955646d4e569a
- SHA512 fd67f6c55940509e8060da53693cb5fbac574eb1e79d5bd8f9bbd43edbd05f68d5f73994798a0eed676d3e583e1c6cde608b54c03604b3818520fa18ad19aec8
- SSDEEP 6144:4FErOIif3RzSHh+20lXs1TzCeBcQeDbNlz7:eEeR52bmeh0n
- TLSH
  T1D274292422F84665E27F47BCD4B5A000D3FAB53699DFDB4E8B64A0DA2F63340D526633
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Xworm 6.4 Nobackdoor/Fixer V6.bat
- Size 122B
- SHA256 a11703fd47d16020fa099a95bb4e46247d32cf8821dc1826e77a971cdd3c4c55
- MD5 2dabc46ce85aaff29f22cd74ec074f86
- SHA1 208ae3e48d67b94cc8be7bbfd9341d373fa8a730
- SHA512 6a50b525bc5d8eb008b1b0d704f9942f72f1413e65751e3de83d2e16ef3cf02ef171b9da3fff0d2d92a81daac7f61b379fcf7a393f46e914435f6261965a53b3
- TLSH
  T10DB02B177482E290838004430271224D39FDA002C291F2C375224530CD84CF0C333795
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral2
- Target
  Xworm 6.4 Nobackdoor/GMap.NET.Core.dll
- Size 2.9MB
- SHA256 58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86
- MD5 819352ea9e832d24fc4cebb2757a462b
- SHA1 aba7e1b29bdcd0c5a307087b55c2ec0c7ca81f11
- SHA512 6a5b0e1553616ea29ec72c12072ae05bdd709468a173e8adbdfe391b072c001ecacb3dd879845f8d599c6152eca2530cdaa2c069b1f94294f778158eaaebe45a
- SSDEEP 49152:ot12Gb/hz7ZsK9qY5uyUW57VC4IB1+fXhQ1hyCzMw/22fSg7gjxhUE/nbTC0xemh:oLbteKb57W1+PhQ1HM1gmJ/SZmh
- TLSH
  T152D5234D77FC068BF5BFDBBD7870069A8331F106AA37E30E15A154A91D23B818851BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Xworm 6.4 Nobackdoor/GMap.NET.WindowsForms.dll
- Size 147KB
- SHA256 741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365
- MD5 32a8742009ffdfd68b46fe8fd4794386
- SHA1 de18190d77ae094b03d357abfa4a465058cd54e3
- SHA512 22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b
- SSDEEP 3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ
- TLSH
  T1DCE3BF6173A58D2FD6BF4BBFA46240C1A371E603F602C38D6D8820ED2897F5587523A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Xworm 6.4 Nobackdoor/Guna.UI2.dll
- Size 1.9MB
- SHA256 c6264665a882e73eb2262a74fea2c29b1921a9af33180126325fb67a851310ef
- MD5 bcc0fe2b28edd2da651388f84599059b
- SHA1 44d7756708aafa08730ca9dbdc01091790940a4f
- SHA512 3bfc3d27c095dde988f779021d0479c8c1de80a404454813c6cae663e3fe63dc636bffa7de1094e18594c9d608fa7420a0651509544722f2a00288f0b7719cc8
- SSDEEP 24576:FIVZLRYIVQd9INo3FDbWX7SsOobBTEAjg+m+ZFNwaxwGoHQ/jzK+:+oWodbi9XFEAjg+m+ZFKaxw
- TLSH
  T1EE9508007ED0DB26D16B4E33D5E75010D3F2B4A26BB2E70F72D5A77C145378AA88A366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Xworm 6.4 Nobackdoor/IconExtractor.dll
- Size 10KB
- SHA256 440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
- MD5 640d8ffa779c6dd5252a262e440c66c0
- SHA1 3252d8a70a18d5d4e0cc84791d587dd12a394c2a
- SHA512 e12084f87bd46010aded22be30e902c5269a6f6bc88286d3bef17c71d070b17beada0fe9e691a2b2f76202b5f9265329f6444575f89aff8551c486eafe4d5f32
- SSDEEP 192:7f77J4cGYyfQknxLvIgyLY5xJeU5pPpZlEAs:HS2yINgyLYLJR5wl
- TLSH
  T179223809E7EA4B37DEB7873654134656E334BA10994FEF5B05CA50642CA73A00B12FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Xworm 6.4 Nobackdoor/MySql.Data.dll
- Size 1.1MB
- SHA256 b9974ec9c4b5453b6a00f2235edcfdcaaad931928c35faf8aac0bb57ef69d782
- MD5 94e00465e44f5782938e27df2dc7362e
- SHA1 2970ceef0c1e6cfe3b8714c428c8857c7b157ca7
- SHA512 25cd34b4ff0e2fe9905f836240aeeeb3202c62a9604c46ae4535016cbad43a31389b9ef11b2f6836ec5f458114aca97a1c63edbf9d598a24f35c7ab6be763e20
- SSDEEP 24576:Y/G6E9m5a3wZC7FuuDqUDcEepg7kiOKTt:9qgVLcEepKuK
- TLSH
  T103456C0037F9EA29D6DF9679E77596184BF1E905B102F75F1208E5A92C33B408E40BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Xworm 6.4 Nobackdoor/NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- TLSH
  T156B45C2237E4962BD1AF5775E4E1191B8BB1F8423237D78F8684BB6E1D837924C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Xworm 6.4 Nobackdoor/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Xworm 6.4 Nobackdoor/Plugins/ActiveWindows.dll
- Size 14KB
- SHA256 22ec63cb694cb33ed5e47d687f45af519cbb935eefe9e105f8a065c34a0bea5d
- MD5 1825a9ece42b3a38bce2bf17f40e05c2
- SHA1 81e3d8abdc3352b7899188c61b4d113f86bf746f
- SHA512 1985d529ffbf283d92b2c1da98b037d066283a13e04c493ff17a866f5d6033d2ec7c3d9f9eedd0c81280b224079747f8177097c24f70781f71bb49774bf7c86c
- SSDEEP 384:MRttr7olU5QrGPbONr3odT8ptsY7XZOEDue:MRtuRrGPbHt0ZOED9
- TLSH
  T112624A69E3E44335C6FE1FB25C73A3001370C6088C47FB5E1ACCA2969D5BA9D8B91766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Xworm 6.4 Nobackdoor/Plugins/Chat.dll
- Size 18KB
- SHA256 6e4ec58c52fb76e93d64fb030b01b220b0cd9d94923c7a7998fa3ca7a8dbf972
- MD5 228f7c41282d0a69587458d9418644c6
- SHA1 84ea8e998e2b983be895e114c8fadcf8e17868c4
- SHA512 c2f206cf583e9adf35a4ad80de4535afd5f148fa4b30668d969e8816665f4da5995b74fe26cf93f22f628db9f09c31171cb201c1d1cdf327feba97d07c221eee
- SSDEEP 384:BMOna4ifKQtuUvl0BY0iYUsBQcrwTKvh6GIKoIufWmWGfN:+KQtuq2Y0lUUvr0pIufWZ+
- TLSH
  T1E1821929539583B3C6FE2BF65D72E1A043B1D211CA07EF6FADDCB0AA48933528741791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Xworm 6.4 Nobackdoor/Plugins/Chromium.dll
- Size 32KB
- SHA256 e130b25e25828eb70036d88b2aa5868a47fc6ef7df83ace8ed9b1ca050fc0500
- MD5 5730cf046b935543bc7b871d411edb52
- SHA1 00b9d0621091d89ce7dc8cfed61b25bc8491ff1b
- SHA512 926818bfd0104b8c75e1537ec6f24673bbdd4d2efea33e669805e5b058e9d2b2352288b4ea60aee2034ed1500dc102e4daa3217140509da5f95813dcf14983f8
- SSDEEP 768:7SyQlmUmBlEuPuXfjq2sgDrNjfcVJ5sxVeEWqPkmV1sRduobKhJLGEY3ZsWmZ:uyQltmBlxuXfjq2sgDrNjfcVJ5sxVebO
- TLSH
  T1E3E2180873E8C654EEFF4E759C3565600372A0839D57F79D0AD1A0AA0BB3B908E51F93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Xworm 6.4 Nobackdoor/Plugins/Clipboard.dll
- Size 14KB
- SHA256 c3a56127a1a31996ed51c202a77a4814108407e3d78135557a22f90850ab2288
- MD5 a919838fc8f94e318e8cd5d31fdb911e
- SHA1 46512b79dda369deca849349c44e748a981ff336
- SHA512 9f83a9804c350f1befb913703c0c39c2a30d2b636649fc94fddc27511fdf014adbf0733a8f0d342df769e39a81ad5cf06f8de865819dbd325fa24f5efd04255d
- SSDEEP 192:pph23MhInehHXpqRxry1/X7eOFXgNTer149iY6IW1mX/YvXa77WLusU:+BeJGxy/X7eUSTe5Wi2X/T/sU
- TLSH
  T13F522B9863E4837DC6FD0AB35C73B2401774C705EC02FF2E1DE860A15EA7A99871276A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Xworm 6.4 Nobackdoor/Plugins/Cmstp-Bypass.dll
- Size 11KB
- SHA256 5b5f4dd71e4fcd7703670e888bf1d2eaf1a5c7834ddff50b869044b39a2e07da
- MD5 82bfe3551669209ba9ea264d41a17cd8
- SHA1 c3b9dd7cbec22d07f47605d4f3d740a8adea4020
- SHA512 05c6694bb725a0d02a5b5d2ffcc868e86b935778a048392bbe51c90f7a6b60d4cee9dcac3bcfceec026c5afd4c2fce11a4e19445f591b50cda2d0e5abbdd974a
- SSDEEP 192:KXpS1QWlPgiqdEquP+GGO9mWbpGkjgyaYcIW1vr/8T4U7aL7+WLEO0AhdW5:K5cjP20mWbEkUyaYir/o4JL7W8
- TLSH
  T1BF32082DA7E18275CD7E0E7248A7E3010771DA44DD23FB2F56E4A10A5D7B38883B2676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Xworm 6.4 Nobackdoor/Plugins/FileManager.dll
- Size 679KB
- SHA256 f31e59350ab8d78919d064e17bb9c4b4e86cf9942c0060188bda7e9bff578e9c
- MD5 ebefb5995e4588574cd92e7048070308
- SHA1 c81e64f8614cefd02cf0e5345e17bf23cc1cabd4
- SHA512 ad48ee5d65f8840e501e74665a77a59cfade1cb78c027f60bd3cc888b858282e42c23716115488fe3f61c7ec211fbed18fd8ef8586ed3ff1a46413acd5a4bb2d
- SSDEEP 12288:Elr7BUE5n+/zlbI9gJvjEWKgpKhGOXoDDDp0b:ElB5n+/z1I9SblKhGO6DDp0b
- TLSH
  T1B8E409203FE8F01FE29A73B6D4D187214BB4A6427296FF8F258446E81C937895C594BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Xworm 6.4 Nobackdoor/Plugins/FilesSearcher.dll
- Size 478KB
- SHA256 0485f40ff9646e4fe5f79a842d680e2ba5ab96a7dc74a2e3d557e91f6e3a35bb
- MD5 5453702f3bc9b3d8971d48ea0a9d6114
- SHA1 52f8c00cdd687972d651278f3397a596c4c4b0f5
- SHA512 0dd473936210fe7669d3adccd663b50ea20c905d4dee60a857726859406c0cfcafed8c53e7214fd019b0c956018ebf0e0242de770f7ab6d95f73ef97268133f8
- SSDEEP 6144:WAHdfUpnnBuIbE7SCQeGtSV41QJDsTDDh0Yhe6dwxLV/0uhg0B6yORUlKL5i+:3VUpnkZ7slS4Ys50ie6Cf3g0PT6s+
- TLSH
  T118A49D412BE8C647F1BF27B2C0E252A1C7B0E455A62EEBCF5D8424EE1D17350E9117AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Xworm 6.4 Nobackdoor/Plugins/HBrowser.dll
- Size 25KB
- SHA256 a8ec5c5e44b81766bfa93eded535484d3f85fa026bda7a5492ab0665557b9e42
- MD5 02630e18ca44a1b38558156d0a6de6f1
- SHA1 d4813541cfcc106f190934d5392b5179d44073a2
- SHA512 dffa9a4c84d195349fb1e88fb097b77829cf557ee229bb59ca42cb28c588b6976b1016b382597d1fac31a624b009662db41765f7eceedb26a415074daacc16d7
- SSDEEP 384:Kp33X3L5/QrX8nB9d13+6HGLReMWaFnp9l/1DRVTbg0Ut4xh+7fYMoKABnR:KR3nL5/QrQ13ORR9bTbz+7YMoFBR
- TLSH
  T10FB25B4967F49630E1FD0A7598B367148370FA935812EF8F0BC9641A2E3B7E446247EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Xworm 6.4 Nobackdoor/Plugins/HRDP.dll
- Size 1.7MB
- SHA256 053f0276f94591724487dc51bb04d15a598a8e608ed80a2b6c1b7c8845095531
- MD5 4ec65b69a58d03fd95a25c1678e9367b
- SHA1 954d85f6c328d4a4b48ac090f17b640fa6f54e97
- SHA512 14388f53efe1d41093b45b108c44db8f32fd2b35907950476ee603c797d4175b67d067f7d0e656b6a0bca538b1d392bb47867d1a47cefb1b997dd6b18bfefd77
- SSDEEP 24576:UrKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:RHZ5pdqYH8ia6GcKuR7
- TLSH
  T166851918F6D8423ED857D2359A7153B2D7FAB9482F20738A2928075A7F2B3D02B3575C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Xworm 6.4 Nobackdoor/Plugins/HVNC.dll
- Size 85KB
- SHA256 db44feac5462370d1b3b7050806509684acf3e2fd804c1b2817867c44441de25
- MD5 e608fb6e14a699106e9cf1d1f5e4ae91
- SHA1 835630b7128e29052db9b3784cf9d6ca5a8b1206
- SHA512 053b744c88aa0450460aaac24107ccdc724bfa1636cffd308993331a849ffc2b0a5f0abab1377f1a39dce8835641ed9de73d417851e15605d2172c7996e1ba47
- SSDEEP 1536:vqhezETwSM9jwX0o71Us5XttkzU3mfICaRUlh:yhezxpjwRp5XttkzUMIC2Mh
- TLSH
  T1DE832889A3FC4610F1FF5B7598725A204BB1F5532932DB1F22E5906E2F777818920BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Xworm 6.4 Nobackdoor/Plugins/HVNCMemory.dll
- Size 39KB
- SHA256 f1f362067d0e613b844e961c9b5c380f95cfa1333436e3431ee3accee1807804
- MD5 b4e4c31850ab3d32f71fabb658c77c26
- SHA1 2071c1d767d4fa868a1e48438d862a98b42b7251
- SHA512 4a9c506b24b6e3d0aa03a1d15244507318e1303c0f7790db735be4ed056488da39ccd07c27ec8b3617bd951335e670d1dd9d5131016b7c9d32236a05cf418533
- SSDEEP 768:xEyXMCBlQ6Kms0noGYMyKgDWj81Y6Mnx9oQog1zqGnf:xLXTa6bX81Y62o87
- TLSH
  T1A0034B4A77FA0221F1FE0AB5CC73A7289331F5934516D70E2AC960696B73682C510FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Xworm 6.4 Nobackdoor/Plugins/HiddenApps.dll
- Size 45KB
- SHA256 3f24e2ed2972d3987bb189fe69830ab8a4ab56588db0ef0763145a78558abebd
- MD5 ed681170501c5728202e0eaef0c156e5
- SHA1 119eb6e56c58f0e5d7faa06a993be01db378804e
- SHA512 c32d3d21e3d1082c2b2063ce7d5703817376d8318c8720908ec38c64c3bfee1dac54a531c0537a66e0f5e65ce63c12a340ccc416f76b3ae76391dca2baa841f4
- SSDEEP 768:kEN0W4dmvWt9VG2LqIvwYGYRpXpWk/x0qqBi3qMG0gpfN3ff+I1:kdmvWHVGMVwtYRtpl/x5qIXdEdX+w
- TLSH
  T1F2233848B7F88620E1FE1B3AA87363149374F4A71A16E74F0BC6A0592F723C45758BD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Xworm 6.4 Nobackdoor/Plugins/Informations.dll
- Size 22KB
- SHA256 4095ed7530b08663ed77d4adc03877a6676aa9f3b815b0ab2e0111d4e74f95ac
- MD5 c282a450afd60bda7c81370a8d031445
- SHA1 1a16d6e6584ab286ca6dc9f6f199b3d348397a00
- SHA512 d2479a6642c55a6a3cfb61696a3845ebef8a67b0db8d58e5ca36f89d440e4276f98cfc91b64dc31cc494a1a4ba67df3b5f453cb4727c51161376dbe7f2eded38
- SSDEEP 384:qCUEeL4D574MvGjydqXwxDJlw0n3TmyxhxJNgSg4eOF6K:qCXeL4DSjydqXwx1lZjfNnl
- TLSH
  T102A22B5837F986A5D2FE1EB14C32924543B6F60B8C12EA1F2DC8909E1D63B84CB55B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Xworm 6.4 Nobackdoor/Plugins/Keylogger.dll
- Size 17KB
- SHA256 f4053d5294926f252bd07de415583ae89fb33365e9b50b69d3984cf18aefd640
- MD5 06e7bde6ffc48a633538c759bcec809d
- SHA1 a78107d2d7613c51cff3ce96c888652f879ff5f2
- SHA512 4627cb9ac9d33fde141b6042cb725dc3956bd428e2a2d7e27f6b06e6992d842581c6a10b42edea0ab39214fffc2c658d58253f48402bcde190c7057d38fc8b60
- SSDEEP 192:fJV/HNfwK5RSpyv3RFRtO1Lnq4Ur1XneDN6IW1Y6Uph1KCaA0UbnFWL2qV:DFl5Rp3RHtMO4U5uD8Upma0y3qV
- TLSH
  T108823A5C77D08379DEFE1EB2583363011770F2069907FB2928EC61664EE3A898751AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Xworm 6.4 Nobackdoor/Plugins/Maps.dll
- Size 15KB
- SHA256 462ce8f5b736dee1c87cffe2194f3327c69a654908c8675955aeb9dd39f1a37a
- MD5 0e243d4e6a5cbcf05d1c0c57d4ecaf62
- SHA1 a1fc91f268f4e80822fb38b0a636fe311865bee1
- SHA512 e84112ec0432439c52fc476c91a77ca6fd7a824700dbaa2b9b3761d807a110e5f53c405805507f63d30c0a2e23ce1c87ca33e0ca44fd750691d953fe8846582b
- SSDEEP 384:XBqmqunML6thaujkS4jtepa9BX/bD3F2:XBqmqunML6JkX5x/XV
- TLSH
  T12A622A16E3944276C6FE0FF65C3262001776E609CC07FF1E2DCC10AA6D6769B8E657A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Xworm 6.4 Nobackdoor/Plugins/MessageBox.dll
- Size 14KB
- SHA256 9c4bb8556013e6eca190a442e70d0a44077ded2e51719864884b36ebc63655a8
- MD5 7f080f724ad59ae4737bab66bed2e3e5
- SHA1 8080755a4bca35bb42d40f80ac687e34189ad782
- SHA512 4b247dd0699f37cdfdb8602c12142312bda6df0938553631cb9e79f450f42975713d0e1f2e84451056507e9494e592bb61118ca551629530727592aad85568fe
- SSDEEP 384:D6lIccn3tURnUuRUUVT/95gG3UX/2ZKUW9:D6lIn3tUVbVa/2Z6
- TLSH
  T1E66208A977E08339C6FE0FB25CB262405771EA099D02FF2E5DD850525EA7984C760F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Xworm 6.4 Nobackdoor/Plugins/Microphone.dll
- Size 540KB
- SHA256 4a238bf470277f1947e9e5383740d925148326f3cb85b6e41cb3587fcd665aa5
- MD5 3f62385887eb9a8b2645b553891dc278
- SHA1 4aa5083190cc732694638cc443073824ffdb2739
- SHA512 13066350eceadf607f697f6f99790c8e0c7db030762ec16db0a80bdf149e0808f8a8459a8fe24fab9fde34d8383396acdc7c9d317c00972a2bc136731857ff08
- SSDEEP 12288:f0OeMv3MrIb8CkZK2bg3WiPLnzrq4bDwsXP:8Oe+WIb8CkZxbg3Wgnrtwsf
- TLSH
  T10DC46E11BFD4856BC06F33B1E0E20B2B57B5E48A7726EB8F14808AEA5DC37525C417A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Xworm 6.4 Nobackdoor/Plugins/Ngrok-Installer.dll
- Size 400KB
- SHA256 806c6b8eb3e1e2538123215a874f9ac8a4af3af7ea6b2b6ccba2c3fa0c9e8937
- MD5 c7445657888041b2321243cd8dc1c230
- SHA1 8e7beb106e6c2ad8a7572aae29501452520cf47a
- SHA512 74397b6a12053144d5b37a319cbf9ca40d1b3f72b5a3adc8cc5f329cc6d6a8097874b498a644fe963f3bf05f5276e9e068d8a5568bc5828b01b5173d4525933e
- SSDEEP 12288:As6T2x75lFR/RG+BUKPqnwoCuYKITu8/M:AEB+4+1CuITL
- TLSH
  T1D8947C107FE0C63BF1AF97F1C162419687F4E05AB79AEBCE6C8554ED28423509A163E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Xworm 6.4 Nobackdoor/Plugins/Options.dll
- Size 30KB
- SHA256 5b10217db23a2ea160e66c154bfab12877b31cad84dc5e69a5aae22a3e1c41a7
- MD5 7684262a187122432035acf0665f8171
- SHA1 2a66ab7f5fd37940f59ef42bb42d7b95acc6f063
- SHA512 5b4528fac3f4fb1b67cec5657b6191c0aa25174657ca66fe809dda4d58acacb950b653827e46b9ad1a965e55ae73b77c9e1c399da61338e92aeeb47eb845404b
- SSDEEP 768:gLxkuz7dDCH839Aybgkf/sGRNW9Z9dPjc8:gLNHGUZbgQsGRNW9ZL
- TLSH
  T111D21A017BE84629F6FF6F31EDF622158E36BC4BAD22EA1D0890101D6C73694CA51F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Xworm 6.4 Nobackdoor/Plugins/Pastime.dll
- Size 17KB
- SHA256 2379d51a088fe576b782ec0fa24794b11618be60f25a7c59410d9663830d9020
- MD5 e0350c0783ddf1993b91948badf43d23
- SHA1 38673da547676acca63367f7436f259704f7264e
- SHA512 729b1f4d02bd946891c0cda0b520baf0e06078a94058909fde058d172a92784799ac2d971d0dcb8fccf8df37c2620b5b3bad83a44a5a20ee21bf523e8c2c0c9a
- SSDEEP 384:PK9Y5jI8MYODPqePW1vepi5zOY7//fNSsA8/h3U:PK9YNI8MVDZKWwr/3A8/hk
- TLSH
  T1938229255BE48371C6FE1EB248B3B31003B5E242DD12FF1E49D86156AD73A85C760BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Xworm 6.4 Nobackdoor/Plugins/Performance.dll
- Size 16KB
- SHA256 00a018de14d33724892424ed1d97ae3447badf08e27a45fbc96d53642d65ae0e
- MD5 f8eb3462b280a9ef61314f7ec6e015d1
- SHA1 5e9c2e0742a213584fe707e0cb4db586c1f093a1
- SHA512 5c33ffda423abe2648c2a4be319ad800199b2d8f4f01de60b6a6ceb716f1ecee002d92ec39e97cd0e0b8301cfd5082dce802a86f8d179b266ef099361f08aa8e
- SSDEEP 384:5tpW2/E3moTWD1XTgOw2QxHN7yVp7yQ+:DY2ImPRDKH/L
- TLSH
  T1D9723A19F7E54376C7ED0EB24972A20117B1DB029D13FB2E4CCC70A64AA3A988B51B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Xworm 6.4 Nobackdoor/Plugins/ProcessManager.dll
- Size 19KB
- SHA256 f36790459ffdd010c4fffcc23d72f8d7d8ce150422e5c9fa569d4bc17e731cbf
- MD5 6e64859849f337cddcc621b0956dfffa
- SHA1 404111ce0a235ea75caed894c6291d41680c1e33
- SHA512 93b0fe6e4b03968b9315868c9c59a264d7928da6fd0c0b56c3399498922625cc7a19924e15b146fa16ee7cef026da3d9bd02a1bbb700f61ccb82101e6ecb1f95
- SSDEEP 384:IRdqZXY/oSd1PTQLvLwLadRtZa/rDvDSQUT5S97/Y5bLOEYQfwrpn45rDhvn1kAY:IRdqZXWrQPkQtZqrDrlU+cYY1kAvZ2
- TLSH
  T14D921859E3E4C3B1C2AD0E72547356510770DB018E23FB1E5CE8B0676EB36E98B22766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Xworm 6.4 Nobackdoor/Plugins/Programs.dll
- Size 13KB
- SHA256 c7e44eba568d34de6b7ae7c588446787e84f16157e1e6ac5f872047d031b7573
- MD5 15b97f062f294a29a201d21470a64154
- SHA1 94362831bc518ce8f50cb9c5e8822119aa04ff7d
- SHA512 1890148352232a6409f8695c052f353d15bb5088b6d520c3608b1295f1aeea1a5b54d81370246294a61d1a3310708a396aa935b082e1ab4fddb25cb6549c761e
- SSDEEP 192:a3eKcfO/TCOAOG+uCno9SFpoFmGv4O4FgkT8zr1P9YD6IW1GX/V3Qd0y5WL2Vb:xPG/TCXF1STSAdnTu5lYTX/NQKy7Vb
- TLSH
  T191521A59B7E48379CAFE0AB25C33A2411B36DA04CD03FF2E29E851465C775948B51BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32