4030c01f7c474c7e4795b0fda094cb2ef356c787d68eea7dcc6e0c387bedcd5c

Resubmissions

10/07/2026, 02:29

260710-cymavsdt3v10

10/07/2026, 02:20

260710-csskpads6z10

Sharing

Copy URL Twitter E-mail

General

Target
XWorm-V3.0-main.zip
Size 25.4MB
Sample260710-csskpads6z
SHA256 4030c01f7c474c7e4795b0fda094cb2ef356c787d68eea7dcc6e0c387bedcd5c
MD5 68bad3483720eddf9cb69f682ac49b74
SHA1 6e972b1290fe278122644515390a3b1b08b79933
SHA512 12180592bf0a32b68f988d207d6f7b6cd63afc96ebcb22b23c56846c5b6620fea036ce6dbbb2b6edf0de847ea26d597c7a0bae909fe1de86e67232ff7f1a922b
SSDEEP 786432:njaDNnx2+2NYPiuIr38/acFVnGajZAS/4lAUt8ivRnoztG:jaDNnxV2iPFo8/a4gB+Ut8iZR
TLSH
T1D64733ABA1120681ECEB9CF61E46C307620B15A1BF95C019F5BB1F856EE35078A7DDCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  XWorm-V3.0-main/Plugins/FileSeacher.dll
- Size 478KB
- SHA256 557a215cec1a3df37da8a6798354e79a3a70f548f7955cfa43a2d75e1d037053
- MD5 21e5acae055bddd2ad584271d77f881e
- SHA1 df3b8db334e5bce0597cea77a4770fad8d7db6fb
- SHA512 52896aabc03595320370a1318749e899b451020f74cedc511b6daa618908bcaa4aee7d0b808a4df6721e2c1a4f93e2f84cea00179f0c7149dccbe6f155eb3dab
- SSDEEP 6144:OPv5T5fIIC8W8XqeGtSV41QJDsTDDh0Yhe6dwxLV/vuhgS0mOdwcG:0nfIICLlS4Ys50ie6CfigSji
- TLSH
  T146A48D406BE8C657F1BF27B6C4F262A0C7B0E465A52EDB8F5D4024EE2D17340E9117AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  XWorm-V3.0-main/Plugins/Fixer.bat
- Size 122B
- SHA256 a11703fd47d16020fa099a95bb4e46247d32cf8821dc1826e77a971cdd3c4c55
- MD5 2dabc46ce85aaff29f22cd74ec074f86
- SHA1 208ae3e48d67b94cc8be7bbfd9341d373fa8a730
- SHA512 6a50b525bc5d8eb008b1b0d704f9942f72f1413e65751e3de83d2e16ef3cf02ef171b9da3fff0d2d92a81daac7f61b379fcf7a393f46e914435f6261965a53b3
- TLSH
  T10DB02B177482E290838004430271224D39FDA002C291F2C375224530CD84CF0C333795
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  XWorm-V3.0-main/Plugins/Informations.dll
- Size 22KB
- SHA256 0452d60d658a43929bf2d5bc049e2c57c2d61f58b6444bab88834c870305dfdf
- MD5 92ba1499b2547f0e38e26360f94101af
- SHA1 71b9ac23eca1c0f50517631cffe59ec1950147b3
- SHA512 1106d4386cda5fe98736138e0e6a01fb2e234700a9e5ed61e2b6a59cdfc82cf82dc2486488944ad009ad34fb3a04b9894bd52fea52968741350b09c7975d4d9c
- SSDEEP 384:4nQf5APE80e6vkD7RQQpOJXWn3TmoNhxJNSOFD4rfZ41:4nQfGPEOD7vcJKj3NSDZQ
- TLSH
  T19FA21A98B7E44265D1FE2AB30872904513B6F70B9D13FA2D1EC8929E4D737C4CA54BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  XWorm-V3.0-main/Plugins/Keylogger.dll
- Size 17KB
- SHA256 c2dc7f27304ad0b1a726b5784b030207b93765a8986c4a4f3999733097a4d43e
- MD5 666290af0aade9cf9f377c5fdce9cba3
- SHA1 d981466e4838b2bac54edf53548169124bdea145
- SHA512 23ccd8c1ea776a70637dad70ccea3f435d99c7465fe99a6d4f8f726f6c320081f5d7327f654bc0f7abf0389b6b95c55809f474c52ca2e3898e99efbe454e77d9
- SSDEEP 192:tLCuLDdyxqvzfZ3ium13gyWacxv8ilNwOHLnq4UP1XPeDN6IW1Y6Up90KWi8Jlb0:EuDdYe0umJ6xfwEO4UNWD8Upt+5h6V
- TLSH
  T11F825D0D77D88375C5FE9AB20C3363501BB1C209A803FB6E2DDC716A5E93B854B54AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  XWorm-V3.0-main/Plugins/Maps.dll
- Size 15KB
- SHA256 b1699235a5ea07dd6516230309f6d94c697d6f9db96ac664dd269aa471a56dcc
- MD5 fef310962c772bbce74c9d9dd3516803
- SHA1 bc3923626417961059688730b464a10fe4eb6115
- SHA512 389ed724fbcb298e5e302166725ceef7067d85e5d71c0a11267717584906c328686110c19ab5b275ee075e1b88b294c9a072c9d3ddef76e0759c584862622bef
- SSDEEP 192:5zW/qqmhqfohvEajSJz+5q6gn+jNq7gGte31HC9T6IW14X/bQeIY3t2vLOo2:KqqmhxvEajr53xgjteFi9BX/b3t1o2
- TLSH
  T160622917A7E48271DBFE0FB24C72620017B6D609CD07FB2E25DC606A5E27696CE21772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  XWorm-V3.0-main/Plugins/Microphone.dll
- Size 540KB
- SHA256 b04ce7ba6ce58408b53ef7d4ef84866539727a76871cb09fef99314711aabb57
- MD5 563090381b43ef273e0dae20ada50d0d
- SHA1 acd5271cf0f959c09d940733a92fc8ee0ed434a6
- SHA512 f0f172b6591766f4e13b7df29c51674f84e80cd7c8317b305519b54f635605b96402764a04cc600024d3cca11c46b5e041692eba3ac919f8f63dd73e08ba37ec
- SSDEEP 6144:1iwpFWBbjRTvqihWI1ElZT2J2CDt4azYPfb78+OmmN8fCgN8OQ9oYCY8gQNUyFJU:QkFWBxTvTWzlZSYXbg6TS4UYTPzeVzn
- TLSH
  T11AC45C11BBD49627D16F33B2E0E20F2A57B1E4467326EB4F169097E89ED77424C01BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  XWorm-V3.0-main/Plugins/Ngrok-Disk.dll
- Size 7.0MB
- SHA256 390f542854416819047e474e5c34ec39e80360cc8c69728d19e8d12732e932fc
- MD5 e11f0adf9a1374112ee0b52ca41a2a9b
- SHA1 23c742a1839800b4606fdb42f2baa9151876d894
- SHA512 6acf4f3f888230aed388d31c0b2c52f6da0c1c31f4184e065511f07aee87757c6f101bbddb8d20d651b7e65d8c329fe871ffb5a4ceebb3ace928fd042a97307c
- SSDEEP 196608:NCsxED7kwTV6B/nCR7+AA3e5MryK5Rj1Bpw7Vdjz8wEO+Dl:NTED7/VEqt/A3TryARj1BpwLktl
- TLSH
  T1277633287BD48167FBEF67F1CD92414A0BF46017B2DAE7CE19DA48FE1D81300992169B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  XWorm-V3.0-main/Plugins/Options.dll
- Size 29KB
- SHA256 035f48b413cf328ddf2bada1b6afd5698f9b8cddf2bcc0187a97629f1063c042
- MD5 90a1c5c0d1cd88b6fe390278c93c4530
- SHA1 b4bec20a1c53e8255518505709a8947dcf7e13aa
- SHA512 ade19d4160bee947a0df9b5bc0ecb4976c1e4ba848e9360b978429fd94aa39a00016107d3daefdc795e45bcb3717c9673fdc543ef544b3e11d92ecfc473c71e8
- SSDEEP 768:01fYFYWjF84UGEm3uGIKxbF/OfUs5Rd794kv:YfYFYWjUm3uabF/1s5Rd79R
- TLSH
  T106D20B45BBF04754F2FE0F75AEB522148A36FD06AD22EA2E09D0601D5C73AC5CA60B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  XWorm-V3.0-main/Plugins/Pastime.dll
- Size 17KB
- SHA256 87baedbd864856f6fdd2ee4fb256842de326b1eea2f71a4fc1914402cdda1f07
- MD5 787f48174c04f87346bdb09f5aff1d95
- SHA1 18278dbb1102a3e0772c5661a51bef6f4965f688
- SHA512 af26853c8372529f109220722045e2a920c5cb9dea5310e1f6fe7d30a8189c54725db743e228709bcef3e20b50325fed57089b044eb18164b4affdbc388fbe12
- SSDEEP 384:KhzO/ClGe/9GGzHQl3HREpi5/mY7//AlxsA8/rHbx:kzO/CEe/9GGzHQxH+wH/xA8/rHt
- TLSH
  T14C822A255BE58271C2BE1EF148B3B3000379E342DE03EF1E99D87556AD73986C620BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  XWorm-V3.0-main/Plugins/Performance.dll
- Size 15KB
- SHA256 1f6fd6b09773fbd53c4eac5d0e77ef4e1be43872ee226983414e65141921d634
- MD5 7ed248558ba25c9fb1eb55e2f1e1dd2e
- SHA1 3f2f71f24f94861922b54f147992d6b94b85acac
- SHA512 2ffe3b5220cf6b92e1f3d2065ba96c685c1ef9ff28470afb5ad8e38b6f821514f4e69ba23caae2f46fa64d94fb8b8de061ca2c979e8c5ae32a5a2dfd046db427
- SSDEEP 384:AmdLFVZ8ERBT32czPbHmTgK62QxHS7OVpPH7EqV:rdLDbRBT32czDuCHPEu
- TLSH
  T17B621959E3E58239C5ED4EF20C73A2011771EB039D13FB2F49D860965F736898E64BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  XWorm-V3.0-main/Plugins/ProcessManager.dll
- Size 17KB
- SHA256 dc12cb5a2c0be8d6e7dd02c761022bc6b12cc6777d38eb7d529178c3d6adaecf
- MD5 96f281e2deb206e3561f0a2dc881b44c
- SHA1 a41ac27787d3e61302d8139874ef68aff89d3f97
- SHA512 9f8336ccd0ed5f6936c9f68527056da7a88e986d24ffcf19e3aca2537307b9cd9e315b55f56e7712b4e49f4442244280073eac4c7d7da7e8a10b4c8200f4ac48
- SSDEEP 384:OdftFqxTfNDgiIsCH9q/Y1aLCEYpt1pnrDhI5XkAvfw5bZLnVb:OdftIwn8TY4XkAv4L
- TLSH
  T176723A1EABE493B4C1EC1EB218B396400770E60A9D23FB2E1DD860276E737958B31795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  XWorm-V3.0-main/Plugins/Programs.dll
- Size 13KB
- SHA256 221e1461a2c950336c0a25cb147d996578c1e9461824b750ca9a4f9d3be93cb5
- MD5 b7ae0664d55bd6b3800871baf6139aed
- SHA1 eccee8e082d9002e551efb8791d323c07ac8abaa
- SHA512 84b8d2f80ea9b1b6b4c4b952f18f9f226473a7e98205c2ca6d5bc6b5cf97ec58f0393f39fbb43bf1f1118da8c369c88b9ee6e228b7012d8953c0607e7dbadf4d
- SSDEEP 384:GjnqNd9cZMvidxD/nTu1NYTX/1bxbBvFxb:GjnqNyBFTN/1/vz
- TLSH
  T16C52085973E5C27AC6FE0AB21C7362401B31EB058D03FF2E16E871865DA79958760BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  XWorm-V3.0-main/Plugins/Ransomware.dll
- Size 20KB
- SHA256 1727ba841000a1c6176bc285853b54904ea69944fa2d59e8daf66872dd4c1d92
- MD5 9f2c86036e8454b2322fb37297e2b119
- SHA1 f54ff6b78099548592db00d8667ece62312e1bb0
- SHA512 a3201c1378b5c6bc1e427f6aaa1637a197ad18a5b38f705d8dc09c73d19e568c5ee8534e844eaed35e5c83da6d1b7db93c9ccbb789845a60943bb8c790a7edbd
- SSDEEP 384:AVSO27QJHvpebFn0LC9Tk7ff2ji+ZMuqI+sHY4k7E3eEHtHxh:AVm7Q1vpebF0LC9TqH2Mj7KtR
- TLSH
  T15392F62D67E0E171DCBF1AF354B3D2510371DD35A821F62C3ACEB0AA1FB21498295E66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  XWorm-V3.0-main/Plugins/Recovery.dll
- Size 496KB
- SHA256 179dcd0bad17db8e467a40d7b57437461cdc3263090966a687bdd40b279e4df2
- MD5 3830944fe780e36b1a3c67dabae5c29e
- SHA1 afd2b6852330f86ad16103ac17a471602dc2a8e2
- SHA512 615bbb13305029ee2aa131ecb8bc397c2a3217fcc7d9a49469f90f1104726ac2c00cc534d72c90cf1cb4f2c2b720e5740089179e23d3394a519236c79cc6cd4b
- SSDEEP 12288:cMEW+SHIWnFEn6YwriYW+aiJdIyl1HXuKtMCiK:+W+iIWqnwiYWefrXuj
- TLSH
  T1B9B4F15827B88A64E5FF4E7EB0B0002543B1B1476A53F79E0FE488E92E71784CD15BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  XWorm-V3.0-main/Plugins/Regedit.dll
- Size 15KB
- SHA256 9e8b3185dfb4605cf9e1df4403fafa36f12f484f4d9604541da0121403dc39b1
- MD5 68d1cd646b429ee4845934cadd05695b
- SHA1 c971c853ff3b53e336ebd150562d5f696f092409
- SHA512 348988df175382247348e6d1329c61e4dd54f724cb2a3c624df1d74827058e4c00aa5f5acc1430d0ed3d63148c603bb75b60487e97e22699986c1e630dce5e88
- SSDEEP 384:+jKSC4zdLNUpTmeyAYvpYrQcfw9A8/QYbleZ:+jK1wrUs5Y0DA8/QYs
- TLSH
  T1B662096AB7D54331C7EE0AB31CB392004371E70A9803EF5F5FD821969E6719C87907A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  XWorm-V3.0-main/Plugins/RemoteDesktop.dll
- Size 17KB
- SHA256 8be2fb14b479ccdd9bc15beaf091a52df492882cb14b74f194a69e01eef8e94c
- MD5 971ef565c65f696214cb77b06e46c5e5
- SHA1 7d72c0b772a9b681ae463c3999998d7db6604785
- SHA512 de4326f2575c7dfbd57ca51947d6698d21a384a4e6a393c9765d5fb6874820e3512fa338cedf94aa199514b8de363a393eb6beacc0a54da9d25c29394b8f72fe
- SSDEEP 384:pZi1wjbuu8stkZYbbV9q/q6t5Nxt2d6QH9G/jrH:WKiu5tkCb2dtWs/j7
- TLSH
  T1F7822C5A73E58371D6FC0AB64C33E7400774D246C903F73B2ADCA16A9DA3AD18760BA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32