donutloader | 1f091c73050f0d294abb1029fdb17f1a06dc8d35f43ad35ea8d318ea6a42b1f6

Sharing

Copy URL Twitter E-mail

General

Target
XWorm V6.4 By XHubTools.zip
Size 17.6MB
Sample260623-nllpcacs8p
SHA256 1f091c73050f0d294abb1029fdb17f1a06dc8d35f43ad35ea8d318ea6a42b1f6
MD5 5770172fe522faabff9585ad74248c24
SHA1 f3a6afcba5990ad970d4055314b7f6d6b3e4e528
SHA512 3ae99d43635d99f9675ba3347488e4a8de31f2439a78e97cefa12d05fd14cd97bdf574e1a688c9310b00ad6d729263fabc93e6cc4524172a72d8618849c594e2
SSDEEP 393216:wCgjugXqrOQ+T030wgTnFkrRRgcFzP/DDbn4zgyQ6j2Uyj2MAMpLRT2swQxb:wCNgXqrCT0kw0FkrRHP/PbM9QY2b23Mj
TLSH
T14407330F99BE2C63DA8ACD3823FD3E65F74EE4F8D574414A82284B456C6E58858C39C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  XWorm V6.4 By XHubTools/MySql.Data.dll
- Size 1.1MB
- SHA256 b9974ec9c4b5453b6a00f2235edcfdcaaad931928c35faf8aac0bb57ef69d782
- MD5 94e00465e44f5782938e27df2dc7362e
- SHA1 2970ceef0c1e6cfe3b8714c428c8857c7b157ca7
- SHA512 25cd34b4ff0e2fe9905f836240aeeeb3202c62a9604c46ae4535016cbad43a31389b9ef11b2f6836ec5f458114aca97a1c63edbf9d598a24f35c7ab6be763e20
- SSDEEP 24576:Y/G6E9m5a3wZC7FuuDqUDcEepg7kiOKTt:9qgVLcEepKuK
- TLSH
  T103456C0037F9EA29D6DF9679E77596184BF1E905B102F75F1208E5A92C33B408E40BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  XWorm V6.4 By XHubTools/NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- TLSH
  T156B45C2237E4962BD1AF5775E4E1191B8BB1F8423237D78F8684BB6E1D837924C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  XWorm V6.4 By XHubTools/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  XWorm V6.4 By XHubTools/Plugins/ActiveWindows.dll
- Size 14KB
- SHA256 22ec63cb694cb33ed5e47d687f45af519cbb935eefe9e105f8a065c34a0bea5d
- MD5 1825a9ece42b3a38bce2bf17f40e05c2
- SHA1 81e3d8abdc3352b7899188c61b4d113f86bf746f
- SHA512 1985d529ffbf283d92b2c1da98b037d066283a13e04c493ff17a866f5d6033d2ec7c3d9f9eedd0c81280b224079747f8177097c24f70781f71bb49774bf7c86c
- SSDEEP 384:MRttr7olU5QrGPbONr3odT8ptsY7XZOEDue:MRtuRrGPbHt0ZOED9
- TLSH
  T112624A69E3E44335C6FE1FB25C73A3001370C6088C47FB5E1ACCA2969D5BA9D8B91766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  XWorm V6.4 By XHubTools/Plugins/Chat.dll
- Size 18KB
- SHA256 6e4ec58c52fb76e93d64fb030b01b220b0cd9d94923c7a7998fa3ca7a8dbf972
- MD5 228f7c41282d0a69587458d9418644c6
- SHA1 84ea8e998e2b983be895e114c8fadcf8e17868c4
- SHA512 c2f206cf583e9adf35a4ad80de4535afd5f148fa4b30668d969e8816665f4da5995b74fe26cf93f22f628db9f09c31171cb201c1d1cdf327feba97d07c221eee
- SSDEEP 384:BMOna4ifKQtuUvl0BY0iYUsBQcrwTKvh6GIKoIufWmWGfN:+KQtuq2Y0lUUvr0pIufWZ+
- TLSH
  T1E1821929539583B3C6FE2BF65D72E1A043B1D211CA07EF6FADDCB0AA48933528741791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  XWorm V6.4 By XHubTools/Plugins/Chromium.dll
- Size 32KB
- SHA256 e130b25e25828eb70036d88b2aa5868a47fc6ef7df83ace8ed9b1ca050fc0500
- MD5 5730cf046b935543bc7b871d411edb52
- SHA1 00b9d0621091d89ce7dc8cfed61b25bc8491ff1b
- SHA512 926818bfd0104b8c75e1537ec6f24673bbdd4d2efea33e669805e5b058e9d2b2352288b4ea60aee2034ed1500dc102e4daa3217140509da5f95813dcf14983f8
- SSDEEP 768:7SyQlmUmBlEuPuXfjq2sgDrNjfcVJ5sxVeEWqPkmV1sRduobKhJLGEY3ZsWmZ:uyQltmBlxuXfjq2sgDrNjfcVJ5sxVebO
- TLSH
  T1E3E2180873E8C654EEFF4E759C3565600372A0839D57F79D0AD1A0AA0BB3B908E51F93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  XWorm V6.4 By XHubTools/Plugins/Clipboard.dll
- Size 14KB
- SHA256 c3a56127a1a31996ed51c202a77a4814108407e3d78135557a22f90850ab2288
- MD5 a919838fc8f94e318e8cd5d31fdb911e
- SHA1 46512b79dda369deca849349c44e748a981ff336
- SHA512 9f83a9804c350f1befb913703c0c39c2a30d2b636649fc94fddc27511fdf014adbf0733a8f0d342df769e39a81ad5cf06f8de865819dbd325fa24f5efd04255d
- SSDEEP 192:pph23MhInehHXpqRxry1/X7eOFXgNTer149iY6IW1mX/YvXa77WLusU:+BeJGxy/X7eUSTe5Wi2X/T/sU
- TLSH
  T13F522B9863E4837DC6FD0AB35C73B2401774C705EC02FF2E1DE860A15EA7A99871276A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  XWorm V6.4 By XHubTools/Plugins/Cmstp-Bypass.dll
- Size 11KB
- SHA256 5b5f4dd71e4fcd7703670e888bf1d2eaf1a5c7834ddff50b869044b39a2e07da
- MD5 82bfe3551669209ba9ea264d41a17cd8
- SHA1 c3b9dd7cbec22d07f47605d4f3d740a8adea4020
- SHA512 05c6694bb725a0d02a5b5d2ffcc868e86b935778a048392bbe51c90f7a6b60d4cee9dcac3bcfceec026c5afd4c2fce11a4e19445f591b50cda2d0e5abbdd974a
- SSDEEP 192:KXpS1QWlPgiqdEquP+GGO9mWbpGkjgyaYcIW1vr/8T4U7aL7+WLEO0AhdW5:K5cjP20mWbEkUyaYir/o4JL7W8
- TLSH
  T1BF32082DA7E18275CD7E0E7248A7E3010771DA44DD23FB2F56E4A10A5D7B38883B2676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  XWorm V6.4 By XHubTools/Plugins/FileManager.dll
- Size 679KB
- SHA256 f31e59350ab8d78919d064e17bb9c4b4e86cf9942c0060188bda7e9bff578e9c
- MD5 ebefb5995e4588574cd92e7048070308
- SHA1 c81e64f8614cefd02cf0e5345e17bf23cc1cabd4
- SHA512 ad48ee5d65f8840e501e74665a77a59cfade1cb78c027f60bd3cc888b858282e42c23716115488fe3f61c7ec211fbed18fd8ef8586ed3ff1a46413acd5a4bb2d
- SSDEEP 12288:Elr7BUE5n+/zlbI9gJvjEWKgpKhGOXoDDDp0b:ElB5n+/z1I9SblKhGO6DDp0b
- TLSH
  T1B8E409203FE8F01FE29A73B6D4D187214BB4A6427296FF8F258446E81C937895C594BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  XWorm V6.4 By XHubTools/Plugins/FilesSearcher.dll
- Size 478KB
- SHA256 0485f40ff9646e4fe5f79a842d680e2ba5ab96a7dc74a2e3d557e91f6e3a35bb
- MD5 5453702f3bc9b3d8971d48ea0a9d6114
- SHA1 52f8c00cdd687972d651278f3397a596c4c4b0f5
- SHA512 0dd473936210fe7669d3adccd663b50ea20c905d4dee60a857726859406c0cfcafed8c53e7214fd019b0c956018ebf0e0242de770f7ab6d95f73ef97268133f8
- SSDEEP 6144:WAHdfUpnnBuIbE7SCQeGtSV41QJDsTDDh0Yhe6dwxLV/0uhg0B6yORUlKL5i+:3VUpnkZ7slS4Ys50ie6Cf3g0PT6s+
- TLSH
  T118A49D412BE8C647F1BF27B2C0E252A1C7B0E455A62EEBCF5D8424EE1D17350E9117AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  XWorm V6.4 By XHubTools/Plugins/HBrowser.dll
- Size 25KB
- SHA256 a8ec5c5e44b81766bfa93eded535484d3f85fa026bda7a5492ab0665557b9e42
- MD5 02630e18ca44a1b38558156d0a6de6f1
- SHA1 d4813541cfcc106f190934d5392b5179d44073a2
- SHA512 dffa9a4c84d195349fb1e88fb097b77829cf557ee229bb59ca42cb28c588b6976b1016b382597d1fac31a624b009662db41765f7eceedb26a415074daacc16d7
- SSDEEP 384:Kp33X3L5/QrX8nB9d13+6HGLReMWaFnp9l/1DRVTbg0Ut4xh+7fYMoKABnR:KR3nL5/QrQ13ORR9bTbz+7YMoFBR
- TLSH
  T10FB25B4967F49630E1FD0A7598B367148370FA935812EF8F0BC9641A2E3B7E446247EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  XWorm V6.4 By XHubTools/Plugins/HRDP.dll
- Size 1.7MB
- SHA256 053f0276f94591724487dc51bb04d15a598a8e608ed80a2b6c1b7c8845095531
- MD5 4ec65b69a58d03fd95a25c1678e9367b
- SHA1 954d85f6c328d4a4b48ac090f17b640fa6f54e97
- SHA512 14388f53efe1d41093b45b108c44db8f32fd2b35907950476ee603c797d4175b67d067f7d0e656b6a0bca538b1d392bb47867d1a47cefb1b997dd6b18bfefd77
- SSDEEP 24576:UrKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:RHZ5pdqYH8ia6GcKuR7
- TLSH
  T166851918F6D8423ED857D2359A7153B2D7FAB9482F20738A2928075A7F2B3D02B3575C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  XWorm V6.4 By XHubTools/Plugins/HVNC.dll
- Size 85KB
- SHA256 db44feac5462370d1b3b7050806509684acf3e2fd804c1b2817867c44441de25
- MD5 e608fb6e14a699106e9cf1d1f5e4ae91
- SHA1 835630b7128e29052db9b3784cf9d6ca5a8b1206
- SHA512 053b744c88aa0450460aaac24107ccdc724bfa1636cffd308993331a849ffc2b0a5f0abab1377f1a39dce8835641ed9de73d417851e15605d2172c7996e1ba47
- SSDEEP 1536:vqhezETwSM9jwX0o71Us5XttkzU3mfICaRUlh:yhezxpjwRp5XttkzUMIC2Mh
- TLSH
  T1DE832889A3FC4610F1FF5B7598725A204BB1F5532932DB1F22E5906E2F777818920BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  XWorm V6.4 By XHubTools/Plugins/HVNCMemory.dll
- Size 39KB
- SHA256 f1f362067d0e613b844e961c9b5c380f95cfa1333436e3431ee3accee1807804
- MD5 b4e4c31850ab3d32f71fabb658c77c26
- SHA1 2071c1d767d4fa868a1e48438d862a98b42b7251
- SHA512 4a9c506b24b6e3d0aa03a1d15244507318e1303c0f7790db735be4ed056488da39ccd07c27ec8b3617bd951335e670d1dd9d5131016b7c9d32236a05cf418533
- SSDEEP 768:xEyXMCBlQ6Kms0noGYMyKgDWj81Y6Mnx9oQog1zqGnf:xLXTa6bX81Y62o87
- TLSH
  T1A0034B4A77FA0221F1FE0AB5CC73A7289331F5934516D70E2AC960696B73682C510FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  XWorm V6.4 By XHubTools/Plugins/HiddenApps.dll
- Size 45KB
- SHA256 3f24e2ed2972d3987bb189fe69830ab8a4ab56588db0ef0763145a78558abebd
- MD5 ed681170501c5728202e0eaef0c156e5
- SHA1 119eb6e56c58f0e5d7faa06a993be01db378804e
- SHA512 c32d3d21e3d1082c2b2063ce7d5703817376d8318c8720908ec38c64c3bfee1dac54a531c0537a66e0f5e65ce63c12a340ccc416f76b3ae76391dca2baa841f4
- SSDEEP 768:kEN0W4dmvWt9VG2LqIvwYGYRpXpWk/x0qqBi3qMG0gpfN3ff+I1:kdmvWHVGMVwtYRtpl/x5qIXdEdX+w
- TLSH
  T1F2233848B7F88620E1FE1B3AA87363149374F4A71A16E74F0BC6A0592F723C45758BD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  XWorm V6.4 By XHubTools/Plugins/Informations.dll
- Size 22KB
- SHA256 4095ed7530b08663ed77d4adc03877a6676aa9f3b815b0ab2e0111d4e74f95ac
- MD5 c282a450afd60bda7c81370a8d031445
- SHA1 1a16d6e6584ab286ca6dc9f6f199b3d348397a00
- SHA512 d2479a6642c55a6a3cfb61696a3845ebef8a67b0db8d58e5ca36f89d440e4276f98cfc91b64dc31cc494a1a4ba67df3b5f453cb4727c51161376dbe7f2eded38
- SSDEEP 384:qCUEeL4D574MvGjydqXwxDJlw0n3TmyxhxJNgSg4eOF6K:qCXeL4DSjydqXwx1lZjfNnl
- TLSH
  T102A22B5837F986A5D2FE1EB14C32924543B6F60B8C12EA1F2DC8909E1D63B84CB55B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  XWorm V6.4 By XHubTools/Plugins/Keylogger.dll
- Size 17KB
- SHA256 f4053d5294926f252bd07de415583ae89fb33365e9b50b69d3984cf18aefd640
- MD5 06e7bde6ffc48a633538c759bcec809d
- SHA1 a78107d2d7613c51cff3ce96c888652f879ff5f2
- SHA512 4627cb9ac9d33fde141b6042cb725dc3956bd428e2a2d7e27f6b06e6992d842581c6a10b42edea0ab39214fffc2c658d58253f48402bcde190c7057d38fc8b60
- SSDEEP 192:fJV/HNfwK5RSpyv3RFRtO1Lnq4Ur1XneDN6IW1Y6Uph1KCaA0UbnFWL2qV:DFl5Rp3RHtMO4U5uD8Upma0y3qV
- TLSH
  T108823A5C77D08379DEFE1EB2583363011770F2069907FB2928EC61664EE3A898751AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  XWorm V6.4 By XHubTools/Plugins/Maps.dll
- Size 15KB
- SHA256 462ce8f5b736dee1c87cffe2194f3327c69a654908c8675955aeb9dd39f1a37a
- MD5 0e243d4e6a5cbcf05d1c0c57d4ecaf62
- SHA1 a1fc91f268f4e80822fb38b0a636fe311865bee1
- SHA512 e84112ec0432439c52fc476c91a77ca6fd7a824700dbaa2b9b3761d807a110e5f53c405805507f63d30c0a2e23ce1c87ca33e0ca44fd750691d953fe8846582b
- SSDEEP 384:XBqmqunML6thaujkS4jtepa9BX/bD3F2:XBqmqunML6JkX5x/XV
- TLSH
  T12A622A16E3944276C6FE0FF65C3262001776E609CC07FF1E2DCC10AA6D6769B8E657A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  XWorm V6.4 By XHubTools/Plugins/MessageBox.dll
- Size 14KB
- SHA256 9c4bb8556013e6eca190a442e70d0a44077ded2e51719864884b36ebc63655a8
- MD5 7f080f724ad59ae4737bab66bed2e3e5
- SHA1 8080755a4bca35bb42d40f80ac687e34189ad782
- SHA512 4b247dd0699f37cdfdb8602c12142312bda6df0938553631cb9e79f450f42975713d0e1f2e84451056507e9494e592bb61118ca551629530727592aad85568fe
- SSDEEP 384:D6lIccn3tURnUuRUUVT/95gG3UX/2ZKUW9:D6lIn3tUVbVa/2Z6
- TLSH
  T1E66208A977E08339C6FE0FB25CB262405771EA099D02FF2E5DD850525EA7984C760F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  XWorm V6.4 By XHubTools/Plugins/Microphone.dll
- Size 540KB
- SHA256 4a238bf470277f1947e9e5383740d925148326f3cb85b6e41cb3587fcd665aa5
- MD5 3f62385887eb9a8b2645b553891dc278
- SHA1 4aa5083190cc732694638cc443073824ffdb2739
- SHA512 13066350eceadf607f697f6f99790c8e0c7db030762ec16db0a80bdf149e0808f8a8459a8fe24fab9fde34d8383396acdc7c9d317c00972a2bc136731857ff08
- SSDEEP 12288:f0OeMv3MrIb8CkZK2bg3WiPLnzrq4bDwsXP:8Oe+WIb8CkZxbg3Wgnrtwsf
- TLSH
  T10DC46E11BFD4856BC06F33B1E0E20B2B57B5E48A7726EB8F14808AEA5DC37525C417A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  XWorm V6.4 By XHubTools/Plugins/Ngrok-Installer.dll
- Size 400KB
- SHA256 806c6b8eb3e1e2538123215a874f9ac8a4af3af7ea6b2b6ccba2c3fa0c9e8937
- MD5 c7445657888041b2321243cd8dc1c230
- SHA1 8e7beb106e6c2ad8a7572aae29501452520cf47a
- SHA512 74397b6a12053144d5b37a319cbf9ca40d1b3f72b5a3adc8cc5f329cc6d6a8097874b498a644fe963f3bf05f5276e9e068d8a5568bc5828b01b5173d4525933e
- SSDEEP 12288:As6T2x75lFR/RG+BUKPqnwoCuYKITu8/M:AEB+4+1CuITL
- TLSH
  T1D8947C107FE0C63BF1AF97F1C162419687F4E05AB79AEBCE6C8554ED28423509A163E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  XWorm V6.4 By XHubTools/Plugins/Options.dll
- Size 30KB
- SHA256 5b10217db23a2ea160e66c154bfab12877b31cad84dc5e69a5aae22a3e1c41a7
- MD5 7684262a187122432035acf0665f8171
- SHA1 2a66ab7f5fd37940f59ef42bb42d7b95acc6f063
- SHA512 5b4528fac3f4fb1b67cec5657b6191c0aa25174657ca66fe809dda4d58acacb950b653827e46b9ad1a965e55ae73b77c9e1c399da61338e92aeeb47eb845404b
- SSDEEP 768:gLxkuz7dDCH839Aybgkf/sGRNW9Z9dPjc8:gLNHGUZbgQsGRNW9ZL
- TLSH
  T111D21A017BE84629F6FF6F31EDF622158E36BC4BAD22EA1D0890101D6C73694CA51F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  XWorm V6.4 By XHubTools/Plugins/Pastime.dll
- Size 17KB
- SHA256 2379d51a088fe576b782ec0fa24794b11618be60f25a7c59410d9663830d9020
- MD5 e0350c0783ddf1993b91948badf43d23
- SHA1 38673da547676acca63367f7436f259704f7264e
- SHA512 729b1f4d02bd946891c0cda0b520baf0e06078a94058909fde058d172a92784799ac2d971d0dcb8fccf8df37c2620b5b3bad83a44a5a20ee21bf523e8c2c0c9a
- SSDEEP 384:PK9Y5jI8MYODPqePW1vepi5zOY7//fNSsA8/h3U:PK9YNI8MVDZKWwr/3A8/hk
- TLSH
  T1938229255BE48371C6FE1EB248B3B31003B5E242DD12FF1E49D86156AD73A85C760BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  XWorm V6.4 By XHubTools/Plugins/Performance.dll
- Size 16KB
- SHA256 00a018de14d33724892424ed1d97ae3447badf08e27a45fbc96d53642d65ae0e
- MD5 f8eb3462b280a9ef61314f7ec6e015d1
- SHA1 5e9c2e0742a213584fe707e0cb4db586c1f093a1
- SHA512 5c33ffda423abe2648c2a4be319ad800199b2d8f4f01de60b6a6ceb716f1ecee002d92ec39e97cd0e0b8301cfd5082dce802a86f8d179b266ef099361f08aa8e
- SSDEEP 384:5tpW2/E3moTWD1XTgOw2QxHN7yVp7yQ+:DY2ImPRDKH/L
- TLSH
  T1D9723A19F7E54376C7ED0EB24972A20117B1DB029D13FB2E4CCC70A64AA3A988B51B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  XWorm V6.4 By XHubTools/Plugins/ProcessManager.dll
- Size 19KB
- SHA256 f36790459ffdd010c4fffcc23d72f8d7d8ce150422e5c9fa569d4bc17e731cbf
- MD5 6e64859849f337cddcc621b0956dfffa
- SHA1 404111ce0a235ea75caed894c6291d41680c1e33
- SHA512 93b0fe6e4b03968b9315868c9c59a264d7928da6fd0c0b56c3399498922625cc7a19924e15b146fa16ee7cef026da3d9bd02a1bbb700f61ccb82101e6ecb1f95
- SSDEEP 384:IRdqZXY/oSd1PTQLvLwLadRtZa/rDvDSQUT5S97/Y5bLOEYQfwrpn45rDhvn1kAY:IRdqZXWrQPkQtZqrDrlU+cYY1kAvZ2
- TLSH
  T14D921859E3E4C3B1C2AD0E72547356510770DB018E23FB1E5CE8B0676EB36E98B22766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  XWorm V6.4 By XHubTools/Plugins/Programs.dll
- Size 13KB
- SHA256 c7e44eba568d34de6b7ae7c588446787e84f16157e1e6ac5f872047d031b7573
- MD5 15b97f062f294a29a201d21470a64154
- SHA1 94362831bc518ce8f50cb9c5e8822119aa04ff7d
- SHA512 1890148352232a6409f8695c052f353d15bb5088b6d520c3608b1295f1aeea1a5b54d81370246294a61d1a3310708a396aa935b082e1ab4fddb25cb6549c761e
- SSDEEP 192:a3eKcfO/TCOAOG+uCno9SFpoFmGv4O4FgkT8zr1P9YD6IW1GX/V3Qd0y5WL2Vb:xPG/TCXF1STSAdnTu5lYTX/NQKy7Vb
- TLSH
  T191521A59B7E48379CAFE0AB25C33A2411B36DA04CD03FF2E29E851465C775948B51BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  XWorm V6.4 By XHubTools/Plugins/Ransomware.dll
- Size 20KB
- SHA256 1d0c55436dcd3751bc51d05e10a73d7a2a80f03ae3ee5c22ba0eaac61693b403
- MD5 2522f0289cafdb0f1490a25548e2d4e6
- SHA1 5cb5f765ae68cb383ed8f42155971f6bcd31775d
- SHA512 c2e953557151a4158ca475074ff80754f2cc64b482b88eddd25f5c1ef3914fc1b10ed724b47ff0293f882192fd0111fbb1832d256278711aa3a0d58676c7e34c
- SSDEEP 384:QVSO27QJHvpebFn0LC9Tk7fxxOi+ZMuqI+sHY4k7EqeEZuQZh:QVm7Q1vpebF0LC9TqZlj7Htkg
- TLSH
  T13F92F62D63E0E175DCBF19F360B3D25103B1DC35A821F62C7ACEB0AA1FB21494295E66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  XWorm V6.4 By XHubTools/Plugins/Recovery.dll
- Size 1.1MB
- SHA256 28ab8b6aaba021460360910909c0fcdbc6a593da96a9820a439550ae240c18fd
- MD5 c28989d92cdedc1ef5f0d27a58190633
- SHA1 ace46cf680ce816851a6cab8866b6eb1977b9f64
- SHA512 321f4855618379862667f7890be2c813c4f26c0477c31328e2f85830e3604de54100cd14054c22e9cefd7fe4a29bb1838a3ae4b62cb023dbcc824e0d3f42572e
- SSDEEP 12288:alwS2DXI0GVFNFfcaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc5cbB:iwSmHGlc805jbmbXM7g8+M9JC+
- TLSH
  T126354B507BE8DA17E0BF23B1E4B20A451BB4F851B3A2E74F544861ED1C62384AE553FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  XWorm V6.4 By XHubTools/Plugins/Regedit.dll
- Size 15KB
- SHA256 d9e0d4c4038031b454f179637228c7f6911a1f3668c6c6da9e24f89245785776
- MD5 d87ebb619cfaed423ebf1103aebc5e75
- SHA1 40b855c33a80aa8181f4ca3224cc821e7a5125fe
- SHA512 395b2cc0f4cc6fa9340ab32685bae26ca1714a270f2bcfa3308752015496bc52e1dbb0b0084df42fd705df315073886eee8899aee6decd28518fe5d8d24ae877
- SSDEEP 384:wZAOzwQW4pmewuYvpYr3fer9A8/VlQeZ:wZAOMrzYCA8/VX
- TLSH
  T104622A9AA7D08332C6FE1BB20C73624157B1E605CD07EF5F9EDC10A65E132ED8741669
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  XWorm V6.4 By XHubTools/Plugins/RemoteDesktop.dll
- Size 18KB
- SHA256 6e1d9460e74aa120b160941f284c09563ba5e75bcedc2006cb750793ce5bc3bb
- MD5 ac409e8856618c3597647440d5d2ddc7
- SHA1 f5df61f6e0e88bd63ffb29866dc86b4e980a0191
- SHA512 979f77957995f775ed268a24b427cfddf87c5a647e68435a1fdf2ae2e3887dd24e51311690e941d7679037ac91562f737f69e762baedbf9d63a11ce3d90752d2
- SSDEEP 384:DKr81F+CoNFZpeg7qX+mKBERFjt9l/C6I5YxBXWSeVFjwJ:WTvZY4gDRbXBIjY
- TLSH
  T107824C1D7BE48379D6AE0E7948B3B3011738C2099D43FB1E4CD8A1A55EA37C98B717A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  XWorm V6.4 By XHubTools/Plugins/ResetSurvival.dll
- Size 1.6MB
- SHA256 8d04215c281bd7be86f96fd1b24a418ba1c497f5dee3ae1978e4b454b32307a1
- MD5 4b6bfd7589b54468c38a9800ac70d781
- SHA1 940d574b867862491320b924e93b243755816282
- SHA512 fa076a680fde936005ecace99d93b1c06b84411507a787046f044f3576aa26452388a369a0f2bb45cd08f782c7d90b9d61af9c6c91c8b6109c5ae0988519c606
- SSDEEP 24576:PCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:67uRfbQswUZcSByYGv5u
- TLSH
  T13E759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  XWorm V6.4 By XHubTools/Plugins/ReverseProxy.dll
- Size 16KB
- SHA256 8166f7b1a098f4150bcae4daa54c2e4721ead52037012617baf11d076f68b91b
- MD5 be9cb8766769017d2e90bce46c4643e5
- SHA1 304a675ebb8834e499db45781bfa49bbd0438245
- SHA512 81bc61522e75ba1213c35c1bbcb352cb6d7cb03929692300872dfb2a696f89909dc248e4d091739e6eb150515099114dbfa10fd657e31ad67aa398a25d47c723
- SSDEEP 384:MNsDP9fBkZ3pBkHEk8GZT8x35UzTNnrYFXoMZlS96P4T:MNuF+ZZ+mwTI3KfEoMZQ96PC
- TLSH
  T1EF7218AC67F08375C6FD0BB34872A2026B71D605D853EB2E5DCC70960D63689CB84B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32