4030c01f7c474c7e4795b0fda094cb2ef356c787d68eea7dcc6e0c387bedcd5c

Sharing

Copy URL Twitter E-mail

General

Target
XWorm-V3.0-main.zip
Size 25.4MB
Sample260710-cmrffac19v
SHA256 4030c01f7c474c7e4795b0fda094cb2ef356c787d68eea7dcc6e0c387bedcd5c
MD5 68bad3483720eddf9cb69f682ac49b74
SHA1 6e972b1290fe278122644515390a3b1b08b79933
SHA512 12180592bf0a32b68f988d207d6f7b6cd63afc96ebcb22b23c56846c5b6620fea036ce6dbbb2b6edf0de847ea26d597c7a0bae909fe1de86e67232ff7f1a922b
SSDEEP 786432:njaDNnx2+2NYPiuIr38/acFVnGajZAS/4lAUt8ivRnoztG:jaDNnxV2iPFo8/a4gB+Ut8iZR
TLSH
T1D64733ABA1120681ECEB9CF61E46C307620B15A1BF95C019F5BB1F856EE35078A7DDCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  XWorm-V3.0-main/NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- TLSH
  T156B45C2237E4962BD1AF5775E4E1191B8BB1F8423237D78F8684BB6E1D837924C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  XWorm-V3.0-main/Plugins/ActiveWindows.dll
- Size 14KB
- SHA256 4263c50674c6ab64a9b5a1ad5e301628baa975e4c919d0c7767ec39adf4cbfe0
- MD5 d45c2a95c5670074713be9e669e4d610
- SHA1 96d26829b4ef8156eb5906f84535866f7f859203
- SHA512 e15a8fc7fa81ad1a6446db7c18494b2e4c15ab28844dbb77deadcae72064ed6bd6e08fe59604c27bd4e44ed059c1a424f322a753293d76bd574262aa31b9e3ea
- SSDEEP 384:7qIGejCUccJeGCJWM2YFegdT8Ft0Y7XZ3W6DMz:7qIGeXcWrCJ+EtYZ3W6Du
- TLSH
  T15B620715E3E54331C6FE1AB34C7363401B70C2099C53FB1E4EDC6096AF63A9986957AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  XWorm-V3.0-main/Plugins/All-In-One.dll
- Size 4.8MB
- SHA256 2987ef4a83e2c44a9abe57cdd9a4bc2b8cbaa01f6835c45cfce180b4d978982c
- MD5 f21e73b79f9aec821c976b4fbae7225c
- SHA1 7be974156ad16f23f4b91b47c380f8c3422a9863
- SHA512 476bdb0c6ac8703e467c51b90b23e45ab72a2e81652e3106732b69d9d299c277c0f9d308117cd338089d3578ebe73d12559b4300fda24d32ca7f1991827aa8df
- SSDEEP 98304:pl19F9QORkChiDC9OtH7c2iwGxIvPBOw0JefVfQ2a5cFd4KssODtd:J9FPRkC8C9OH7c2ilInz0kfVo26Wsd
- TLSH
  T10F3623187FE18717F9EF97F1D5A2420A9BF4E053B356E79F5E9484E9388230089222D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  XWorm-V3.0-main/Plugins/Chat.dll
- Size 18KB
- SHA256 eef8fb30e32b48e1480a6131de34436c0a8efafcf807856fcebd618661b7a6c6
- MD5 c1a27e18603cdd587ae47e0e4b71c5f1
- SHA1 9a8a3b938c0e4c79687750dbbd459ff3879c4c2f
- SHA512 53467107f6f0443854879d61135d73e04e387f9cc5e6ccd277732d582095eea9268d5ad6be1a8502421109ba77d86bb20d42efbe67b97d309b4c6c215b6575b9
- SSDEEP 384:KeUeLD8aDbXCtSeEd3uq7uQZRHUrwTKvt0GIKoIkfiUWGfZ:MkbCtSeE5uq7uQYr0HIkfiX6
- TLSH
  T173823A2DA391C3F2C6FD2BF64C72928107B1D221DE03FF2A9ECC946A9DA37854644785
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  XWorm-V3.0-main/Plugins/Clipboard.dll
- Size 14KB
- SHA256 5a70530748decb0c81fb9c912fd3d75d7d493fd67675bb7dbfe141c3fda15587
- MD5 b23bb3be1718e1aeefc3e822119692f9
- SHA1 d4dabddf9b9d3f0b2adb86a3799f1cf9ec614d48
- SHA512 d66697d97146148978aa5f46cc14232230e553842601cc0e3b0eaaf86f21e91f907153dc710405df7d1dc32d8120134886b29ec164738cef0fa7a827a2ae90a1
- SSDEEP 192:KkAXyVpJlyIxlioHESRJ29u+6ZWSYASO3tOXXgNTen1i9iY6IW1mX/60/qAqEM7R:KkXVpuoHpMDfAR98STe1oi2X/6kMrwU
- TLSH
  T16A524B59B3D44339C6EE1AB21C3392800774D715AC13FF2E2CD8A0B15DA76D58762BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  XWorm-V3.0-main/Plugins/FileManager.dll
- Size 27KB
- SHA256 f13aa0515a65a4701269a57183884846417688d1476c7252291ac5bf7149746b
- MD5 d2c7a574a9b9df92366a981761d494ba
- SHA1 d7d6c4674eac54102e61331fc116ac5abebf42ee
- SHA512 a876da49f048fffb0dc522d4f7471b1c1076fda327d7ad0282162b749375dc13797300f51ccb0b5d2327d6b6f6e0f75f3204a83a4a384108f1e34b7a179b0ce0
- SSDEEP 384:tp4K215dISbc/TY0mN1PGDQXSBJVYol/tF37enOAkxqb8cq/hsutzgk/b7oBxkSE:h21vWk0yPGsXAr7dtRKPb8V3emjC0b
- TLSH
  T1A9C22BAE3BD08211C5FE89B2597294080730EA039823FF5E7DC4359E9E33AD64E107E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  XWorm-V3.0-main/Plugins/FileSeacher.dll
- Size 478KB
- SHA256 557a215cec1a3df37da8a6798354e79a3a70f548f7955cfa43a2d75e1d037053
- MD5 21e5acae055bddd2ad584271d77f881e
- SHA1 df3b8db334e5bce0597cea77a4770fad8d7db6fb
- SHA512 52896aabc03595320370a1318749e899b451020f74cedc511b6daa618908bcaa4aee7d0b808a4df6721e2c1a4f93e2f84cea00179f0c7149dccbe6f155eb3dab
- SSDEEP 6144:OPv5T5fIIC8W8XqeGtSV41QJDsTDDh0Yhe6dwxLV/vuhgS0mOdwcG:0nfIICLlS4Ys50ie6CfigSji
- TLSH
  T146A48D406BE8C657F1BF27B6C4F262A0C7B0E465A52EDB8F5D4024EE2D17340E9117AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  XWorm-V3.0-main/Plugins/Fixer.bat
- Size 122B
- SHA256 a11703fd47d16020fa099a95bb4e46247d32cf8821dc1826e77a971cdd3c4c55
- MD5 2dabc46ce85aaff29f22cd74ec074f86
- SHA1 208ae3e48d67b94cc8be7bbfd9341d373fa8a730
- SHA512 6a50b525bc5d8eb008b1b0d704f9942f72f1413e65751e3de83d2e16ef3cf02ef171b9da3fff0d2d92a81daac7f61b379fcf7a393f46e914435f6261965a53b3
- TLSH
  T10DB02B177482E290838004430271224D39FDA002C291F2C375224530CD84CF0C333795
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  XWorm-V3.0-main/Plugins/Informations.dll
- Size 22KB
- SHA256 0452d60d658a43929bf2d5bc049e2c57c2d61f58b6444bab88834c870305dfdf
- MD5 92ba1499b2547f0e38e26360f94101af
- SHA1 71b9ac23eca1c0f50517631cffe59ec1950147b3
- SHA512 1106d4386cda5fe98736138e0e6a01fb2e234700a9e5ed61e2b6a59cdfc82cf82dc2486488944ad009ad34fb3a04b9894bd52fea52968741350b09c7975d4d9c
- SSDEEP 384:4nQf5APE80e6vkD7RQQpOJXWn3TmoNhxJNSOFD4rfZ41:4nQfGPEOD7vcJKj3NSDZQ
- TLSH
  T19FA21A98B7E44265D1FE2AB30872904513B6F70B9D13FA2D1EC8929E4D737C4CA54BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  XWorm-V3.0-main/Plugins/Keylogger.dll
- Size 17KB
- SHA256 c2dc7f27304ad0b1a726b5784b030207b93765a8986c4a4f3999733097a4d43e
- MD5 666290af0aade9cf9f377c5fdce9cba3
- SHA1 d981466e4838b2bac54edf53548169124bdea145
- SHA512 23ccd8c1ea776a70637dad70ccea3f435d99c7465fe99a6d4f8f726f6c320081f5d7327f654bc0f7abf0389b6b95c55809f474c52ca2e3898e99efbe454e77d9
- SSDEEP 192:tLCuLDdyxqvzfZ3ium13gyWacxv8ilNwOHLnq4UP1XPeDN6IW1Y6Up90KWi8Jlb0:EuDdYe0umJ6xfwEO4UNWD8Upt+5h6V
- TLSH
  T11F825D0D77D88375C5FE9AB20C3363501BB1C209A803FB6E2DDC716A5E93B854B54AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  XWorm-V3.0-main/Plugins/Maps.dll
- Size 15KB
- SHA256 b1699235a5ea07dd6516230309f6d94c697d6f9db96ac664dd269aa471a56dcc
- MD5 fef310962c772bbce74c9d9dd3516803
- SHA1 bc3923626417961059688730b464a10fe4eb6115
- SHA512 389ed724fbcb298e5e302166725ceef7067d85e5d71c0a11267717584906c328686110c19ab5b275ee075e1b88b294c9a072c9d3ddef76e0759c584862622bef
- SSDEEP 192:5zW/qqmhqfohvEajSJz+5q6gn+jNq7gGte31HC9T6IW14X/bQeIY3t2vLOo2:KqqmhxvEajr53xgjteFi9BX/b3t1o2
- TLSH
  T160622917A7E48271DBFE0FB24C72620017B6D609CD07FB2E25DC606A5E27696CE21772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  XWorm-V3.0-main/Plugins/Microphone.dll
- Size 540KB
- SHA256 b04ce7ba6ce58408b53ef7d4ef84866539727a76871cb09fef99314711aabb57
- MD5 563090381b43ef273e0dae20ada50d0d
- SHA1 acd5271cf0f959c09d940733a92fc8ee0ed434a6
- SHA512 f0f172b6591766f4e13b7df29c51674f84e80cd7c8317b305519b54f635605b96402764a04cc600024d3cca11c46b5e041692eba3ac919f8f63dd73e08ba37ec
- SSDEEP 6144:1iwpFWBbjRTvqihWI1ElZT2J2CDt4azYPfb78+OmmN8fCgN8OQ9oYCY8gQNUyFJU:QkFWBxTvTWzlZSYXbg6TS4UYTPzeVzn
- TLSH
  T11AC45C11BBD49627D16F33B2E0E20F2A57B1E4467326EB4F169097E89ED77424C01BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  XWorm-V3.0-main/Plugins/Ngrok-Disk.dll
- Size 7.0MB
- SHA256 390f542854416819047e474e5c34ec39e80360cc8c69728d19e8d12732e932fc
- MD5 e11f0adf9a1374112ee0b52ca41a2a9b
- SHA1 23c742a1839800b4606fdb42f2baa9151876d894
- SHA512 6acf4f3f888230aed388d31c0b2c52f6da0c1c31f4184e065511f07aee87757c6f101bbddb8d20d651b7e65d8c329fe871ffb5a4ceebb3ace928fd042a97307c
- SSDEEP 196608:NCsxED7kwTV6B/nCR7+AA3e5MryK5Rj1Bpw7Vdjz8wEO+Dl:NTED7/VEqt/A3TryARj1BpwLktl
- TLSH
  T1277633287BD48167FBEF67F1CD92414A0BF46017B2DAE7CE19DA48FE1D81300992169B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  XWorm-V3.0-main/Plugins/Options.dll
- Size 29KB
- SHA256 035f48b413cf328ddf2bada1b6afd5698f9b8cddf2bcc0187a97629f1063c042
- MD5 90a1c5c0d1cd88b6fe390278c93c4530
- SHA1 b4bec20a1c53e8255518505709a8947dcf7e13aa
- SHA512 ade19d4160bee947a0df9b5bc0ecb4976c1e4ba848e9360b978429fd94aa39a00016107d3daefdc795e45bcb3717c9673fdc543ef544b3e11d92ecfc473c71e8
- SSDEEP 768:01fYFYWjF84UGEm3uGIKxbF/OfUs5Rd794kv:YfYFYWjUm3uabF/1s5Rd79R
- TLSH
  T106D20B45BBF04754F2FE0F75AEB522148A36FD06AD22EA2E09D0601D5C73AC5CA60B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  XWorm-V3.0-main/Plugins/Pastime.dll
- Size 17KB
- SHA256 87baedbd864856f6fdd2ee4fb256842de326b1eea2f71a4fc1914402cdda1f07
- MD5 787f48174c04f87346bdb09f5aff1d95
- SHA1 18278dbb1102a3e0772c5661a51bef6f4965f688
- SHA512 af26853c8372529f109220722045e2a920c5cb9dea5310e1f6fe7d30a8189c54725db743e228709bcef3e20b50325fed57089b044eb18164b4affdbc388fbe12
- SSDEEP 384:KhzO/ClGe/9GGzHQl3HREpi5/mY7//AlxsA8/rHbx:kzO/CEe/9GGzHQxH+wH/xA8/rHt
- TLSH
  T14C822A255BE58271C2BE1EF148B3B3000379E342DE03EF1E99D87556AD73986C620BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  XWorm-V3.0-main/Plugins/Performance.dll
- Size 15KB
- SHA256 1f6fd6b09773fbd53c4eac5d0e77ef4e1be43872ee226983414e65141921d634
- MD5 7ed248558ba25c9fb1eb55e2f1e1dd2e
- SHA1 3f2f71f24f94861922b54f147992d6b94b85acac
- SHA512 2ffe3b5220cf6b92e1f3d2065ba96c685c1ef9ff28470afb5ad8e38b6f821514f4e69ba23caae2f46fa64d94fb8b8de061ca2c979e8c5ae32a5a2dfd046db427
- SSDEEP 384:AmdLFVZ8ERBT32czPbHmTgK62QxHS7OVpPH7EqV:rdLDbRBT32czDuCHPEu
- TLSH
  T17B621959E3E58239C5ED4EF20C73A2011771EB039D13FB2F49D860965F736898E64BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32