68129eb55be1281185a2280aefb34b0445fa6a1897f3ee857c9b67aa00d48bf9

Resubmissions

11/07/2026, 21:33

260711-1egs2acx8v10

11/07/2026, 21:31

260711-1dc4fsax6p10

Sharing

Copy URL Twitter E-mail

General

Target
XWorm V3.1 (1).7z
Size 24.3MB
Sample260711-1dc4fsax6p
SHA256 68129eb55be1281185a2280aefb34b0445fa6a1897f3ee857c9b67aa00d48bf9
MD5 fc90807c3104858c05428755d8157b8b
SHA1 8363c60d4876a1f2ba1c4e16ba623a7dcd34fdb0
SHA512 70c77c70d11a951a3354fffa3e2a9c77ab2c439e33419fae75d34d9810eb8668ad8128532d481f906ee8d860de980c2ee8bad05d590b83b6f00e5a63fb1e469f
SSDEEP 786432:JwB+6vm1xL9gKh0tdx960jAT0tLvD6lTr7sPjRf:DrKtdC0B5vDw3sPjd
TLSH
T1784733761639C23F5CBA918D411A11DA8FD76EFF3B8638C9C432A11ECF690B17A64907
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  XWorm V3.1 (1).7z
- Size 24.3MB
- SHA256 68129eb55be1281185a2280aefb34b0445fa6a1897f3ee857c9b67aa00d48bf9
- MD5 fc90807c3104858c05428755d8157b8b
- SHA1 8363c60d4876a1f2ba1c4e16ba623a7dcd34fdb0
- SHA512 70c77c70d11a951a3354fffa3e2a9c77ab2c439e33419fae75d34d9810eb8668ad8128532d481f906ee8d860de980c2ee8bad05d590b83b6f00e5a63fb1e469f
- SSDEEP 786432:JwB+6vm1xL9gKh0tdx960jAT0tLvD6lTr7sPjRf:DrKtdC0B5vDw3sPjd
- TLSH
  T1784733761639C23F5CBA918D411A11DA8FD76EFF3B8638C9C432A11ECF690B17A64907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  XWorm V3.1/NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- TLSH
  T156B45C2237E4962BD1AF5775E4E1191B8BB1F8423237D78F8684BB6E1D837924C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  XWorm V3.1/Plugins/ActiveWindows.dll
- Size 14KB
- SHA256 5679768b449a8e59b5a9ad8eb6e9fcd7e03c70869da8fd7b6cec5e948aac56b1
- MD5 abf694ddb10c63e5205444b442e49706
- SHA1 8d9d2beba8240b2795b6113db9a158219e63ffeb
- SHA512 63c44c10b88f2a2655887a93b1f4b2288f99d2ae3622ff7f62a9edf4ff9325ebb66e16215572fe896e46fc335364b203f632124e9409b9f863189306a9499f30
- SSDEEP 384:IqIGejCUccJeGCJWM2YFegdT8Ft0Y7XZ316DMz:IqIGeXcWrCJ+EtYZ316Du
- TLSH
  T14B620755E3E54331C6FE1AB34C7323401B70C2099C53FB1E4EDC6096AF63A9986957BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  XWorm V3.1/Plugins/All-In-One.dll
- Size 4.8MB
- SHA256 effaa01f092dda8351e6f4a4a1bc651acf91865a4f512a3a336b7e6fea495bda
- MD5 8b462f2be3497eb66347a6047180d759
- SHA1 601974b1547653fa38f84a5e2b6cef1d4a4214ca
- SHA512 6fb8226192277cfda113805154cf83c01590db1b159add775d21db0101b8c5b45847ceef27f105d0275b1b1dc692cc5774f7777795ae8e832301836bed5d4843
- SSDEEP 98304:nl19F9QORkChiDC9OtH7c2iwGxIvPBOw0JefVfQ2a5cFd4KssODtd:z9FPRkC8C9OH7c2ilInz0kfVo26Wsd
- TLSH
  T1953623187FE18717F9EF97F1D5A2420A9BF4E053B356E79F5E9484E9388230089222D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  XWorm V3.1/Plugins/Chat.dll
- Size 18KB
- SHA256 185efd0dda1032e4e738b674877bb2c0de931b02f69057d6ee00914f9b8f6db7
- MD5 a25cbb61fadacf30d8e4b638c097d30b
- SHA1 ba3ba796c8dfc5e802179c1a85ebdaab0ed35c78
- SHA512 7dc53503402c69e9d659de45993ceffdf61824d853eb55fda921469f683df2f6ba44f76ec1462d5614a8cafd95e976615d4cd94e28c068eed22e56ed5ab67826
- SSDEEP 384:zUeLD8aDbXCtSeEd3uq7uQZRHUrwTKvt0GIKoIDfiUWGfZ:+kbCtSeE5uq7uQYr0HIDfiX6
- TLSH
  T102823A2DA395C3F2C6FD2BF64C72928107B1D221DE03FF2A9ECC946A9DA37854644785
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  XWorm V3.1/Plugins/Clipboard.dll
- Size 14KB
- SHA256 6e6d2010f02c4a2b8372ed98728e68d740d262df05be811942e26229f21af1b9
- MD5 3873c7a085d349ee7d80f19a1d04466a
- SHA1 df563f40438603db051e97ba5d15b8d064eaa918
- SHA512 12a806f5f035c69fe4ed3859cb42e1441924185d40c23c026a57ce052c9a4060bc1d5fb7d289db4d94be093fbb763075cd667c6db5aee3541defd076c5163b2d
- SSDEEP 192:kAXyVpJlyIxlioHESRJ29u+6ZWSYASO3tOXXgNTen1i9iY6IW1mX/60/jAqEM7RL:kXVpuoHpMDfAR98STe1oi2X/6xMrwU
- TLSH
  T148523B59B3D44339C6EE1AB21C7392800774D715AC13FF2E2CD8A0B15DAB6D58762BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  XWorm V3.1/Plugins/FileManager.dll
- Size 27KB
- SHA256 4da7b92dd81ff96931aa9012eabaa0878d13c78dc3cd840b102ce7e15fec4b7b
- MD5 35e01d48dc293c1ee38fb76a001fc6fd
- SHA1 36b5ec73b188bed24e8549f1f9244acc89e2ecc7
- SHA512 210260c3802c21a48f84bc5c865d4b8fd804258d160ca8d20032e32650f4e197a650463e6cb56e7b459b6043046be17b146d26a4ee41b0e215c842ba5ecf6cd3
- SSDEEP 384:tp4K215dISbc/TY0mN1PGDQXSBJVYol/tF37enOAkxqb8cq/hsutzgk/b7oBxkpE:h21vWk0yPGsXAr7dtRKPb8V3dmjC0b
- TLSH
  T131C22BAE3BD08211D5FE89B2497295080730EA039823FF5E7DC4359E9E33AD64A107F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  XWorm V3.1/Plugins/FileSeacher.dll
- Size 478KB
- SHA256 1d97563568c011b93d3149bfd062d81647b1ccb9ab87b270e39a518d108f77d1
- MD5 f7bea87f295d1d4284ae396a822950a0
- SHA1 d8c7bdac70c147dfc1432b6794a821d9b07d720a
- SHA512 8061d47255769a398d4a1f608260c211de4be71d3475d4284f0df881b371de172cc334f323ad4bb9d702ceac6de0ae700f3006d9c2e383bd41f1742d0ae8b2e9
- SSDEEP 6144:zPv5T5fIIC8W8XqeGtSV41QJDsTDDh0Yhe6dwxLV/vuhgS0mkdwcG:znfIICLlS4Ys50ie6CfigSjE
- TLSH
  T139A48D406BE8C657F1BF27B6C4F262A0C7B0E465A52EDB8F5D4024EE2D17340E9117AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  XWorm V3.1/Plugins/HRDP.dll
- Size 1.7MB
- SHA256 52ebcc3cd12ee6ce2274cc289386beb7a9dc31a4a2b583dbab5495b67b32ca27
- MD5 144178b1a4f5e6b19b01a272d29a2f0b
- SHA1 0af94d62ac2e0c9db3f9d7054382c5226efd21f5
- SHA512 928b0dd4c9cc0c4edb8d64acdc6dd8e9c92951af2bd218ffd0f5991109133b4b30bdbabe4f4762b8d14f9c15ecde716404cfc036ece4d7b2d6db159428ad7fb9
- SSDEEP 24576:brKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:6HZ5pdqYH8ia6GcKuR7
- TLSH
  T1B5851918F6D8423ED857D2359A7153B2D7FAB9482F20738A2928075A7F2B3D02B3575C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  XWorm V3.1/Plugins/HVNC.dll
- Size 58KB
- SHA256 8918b5549441692917ab504e1ad9455d8e62eff189becadee048e6c1493d1bbb
- MD5 9dfed469828dc9a5ec89e3cd21d5b74a
- SHA1 8422ba84ef565ad495958249bc940b527e9c9460
- SHA512 ce8bdb7e820c3d910c3a6232552e2a576a4c03cc128dd6d4eba5b48f3b1ff397e0abc9918e0f08d550962b81e69dfb3cab579a2ac81e2c57658da2c35a9be9f8
- SSDEEP 1536:8SheTaT7z12BWR74mdItPighZ+7YvgxBFQ:jheTKz12BWR76BhbynQ
- TLSH
  T180434A4567E58A31E1FE0F76887397108771F2635913EB0E1BC5A0A96FA33828651BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  XWorm V3.1/Plugins/Informations.dll
- Size 22KB
- SHA256 88569d549e184ef63f2c2ae4e3c3adc9d957296b6a67cf0ee94287d681cc0934
- MD5 da772b035ae5b347de1b17e2e24463dc
- SHA1 5ba3cdaf6e33c58cfd8ccecbe14310a035e00523
- SHA512 ba396154e899dca31312ab9e2a14682aed0a51b5d45db4b0c72efad5cd74767c5bde2bf90099bd886a52adcdf8abb66ff16dcd992ed6a7598ce49e3afaa95922
- SSDEEP 384:DnQf5APE80e6vkD7RQQpOJXWn3TmoNhxJNSOFD45fZ41:DnQfGPEOD7vcJKj3NSRZQ
- TLSH
  T104A21A98B3E44265D1FE2AB30872904513B6F70B9D13FA2D1EC8919E4D73784CA54BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  XWorm V3.1/Plugins/Keylogger.dll
- Size 17KB
- SHA256 e2daf2c0841090b2dff517e14acd48d393b899be1e213f001229d1af9a1de2b8
- MD5 84e36d752271a46310b0afb8482a08ce
- SHA1 2e922c41f7136f327f74354afe7eace5484cb2d5
- SHA512 0b1632a766feec97de5e30a22e6abca67119e53d8715bc22d15970731e91446b17b625614cad79d887299dbc5b5fa78c66db2b0c36167a3009a678a5086b726c
- SSDEEP 192:BLCuLDdyxqvzfZ3ium13gyWacxv8ilNwOHLnq4UP1XPeDN6IW1Y6Up90Kli8Jlb0:QuDdYe0umJ6xfwEO4UNWD8Upt15h6V
- TLSH
  T152825D0D77D88375C5FE9AB20C3363501BB1C209A803FB6E2DDC716A5E93B854B54AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  XWorm V3.1/Plugins/Maps.dll
- Size 15KB
- SHA256 241be6a9343d9b9a81877af9a072dd4e3de671b6f6dedf8d19b01139cd19a516
- MD5 b09308a5c0b7e0bc67ccbe32a8d043aa
- SHA1 d0d1cc4213e5b8f721fc35753a747794e0af7afb
- SHA512 9fd8406cc75f3c10bc3c74f23d3e9b58e64ca19370162e5cfd52cfd5517240a98612093a849db3d7a011e736c09578748f8c33cddf51be737852b2dcfcf9cd25
- SSDEEP 192:IzW/qqmhqfohvEajSJz+5q6gn+jNq7gGte31HC9T6IW14X/bQeIac3t2vLOo2:ZqqmhxvEajr53xgjteFi9BX/bXwt1o2
- TLSH
  T184622A17A7E48271DBFE0FB24C72620117B6D609CD03FB1E29DC506A5E27696CE21772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  XWorm V3.1/Plugins/Microphone.dll
- Size 540KB
- SHA256 9b73be7a27b5aa8cabf10c79a6e515db6b59962cad3945dada2eff57bb56bfdf
- MD5 8105f5149e1fea72e27f0a1455d956bc
- SHA1 6722d54df38b89284c3375efda3985155e6f5b8e
- SHA512 4f1aaa81263bb17aa7b495cab056fd9b18058247df874866bd9cb6247f180989a0d549ce0b4595c7a636e4d6279e92004c4f159c30e8b381a1a51b9d54a84d10
- SSDEEP 6144:0iwpFWBbjRTvqihWI1ElZT2J2CDt4azYPfb78+OmmN8fCgN8OQSoYCY8gQNUyFJU:LkFWBxTvTWzlZSYXbg6TSJUYTPzeVzn
- TLSH
  T19CC45C11BBD49627D16F33B2E0E20F2A57B1E4467326EB4F169097E89ED77424C01BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  XWorm V3.1/Plugins/Ngrok-Disk.dll
- Size 7.0MB
- SHA256 61dd7fef160748b70e706e3afb21b100b55950edcf6899d97a8b8d52035bff75
- MD5 32be6f1d8c99be26ab2b1391073e3dff
- SHA1 70c186a44ec935b7083ad2981ad23df128f690bf
- SHA512 291caf23708fce9eff090df21cc78d3795435ccc47a47e46352fc456d9f2909277e657c874c7ffb603a350b0c4c76e88ec904eeca0a09955d70b4506379ce498
- SSDEEP 196608:dCsxED7kwTV6B/nCR7+AA3e5MryK5Rj1Bpw7Vdjz8wEO+Dl:dTED7/VEqt/A3TryARj1BpwLktl
- TLSH
  T1B37633287BD48167FBEF67F1CD92414A0BF46017B2DAE7CE19DA48FE1D81300992169B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  XWorm V3.1/Plugins/Options.dll
- Size 24KB
- SHA256 f899ff9ec2a4e63c6b1bd14d8978550c2befc3dba18f1c97e4f9e01f24890b6e
- MD5 074e336fb076c4805fea3b1b07655f19
- SHA1 39c402b592deef46c4e5d2f45fe4f29cbd5e6ff7
- SHA512 2e2b0a0f61b2498d3042d313f820aabc2903f8ab567c22a0c414b500d0e382e6f00cf4aed941ea2830e4123823036215a3802e11b849e348a4f737bb9decf03e
- SSDEEP 384:GUd0+k0mA1+2EyhoafV8bKKJtMCNI9LfGyHs5RBndE9Lz9NRc3Bw:GUdSO+i3yb4Lfds5RNW9jRce
- TLSH
  T175B2F950B7F40668F5FF0F35AEB561248A36FC469D22EA1D4984600E5C73AD1CAA1F36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  XWorm V3.1/Plugins/Pastime.dll
- Size 17KB
- SHA256 6c73d14b4de11e7d8f4dd65105280083086570ded5908870ad07a04f436de1e3
- MD5 7d76bd3c8ef11f53723287989ef902cf
- SHA1 71a14614ce2b85920092fd701d8264910f1ec40a
- SHA512 1fd0ec708123066b793c2f54b521bfc0b18b8383f913745fcbc20cd82d7dbb1c141e93bcc88e2a66a876266d613151467b72b7119d768ddf9b65fa97bda3baad
- SSDEEP 384:hzO/ClGe/9GGzHQl3HREpi5/mY7//Al5sA8/rHbx:hzO/CEe/9GGzHQxH+wH/dA8/rHt
- TLSH
  T104822A255BE58271C2FE1EF148B3B3000379E342DE03EF1E99D87516AD73986C620BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  XWorm V3.1/Plugins/Performance.dll
- Size 15KB
- SHA256 82e3f38ad7eef287a4260eb85d714e46e556316216aae2e140a7a033d4f2fc38
- MD5 b6ed904707d2b528c50933ee38affb86
- SHA1 9266c83fda87c3d627f646f49adf677c06d49d0c
- SHA512 bffe33724146e3993687236eff3f54ab1e3c21085b77a7dc255796e91564b2e0fa4a56e406a66f5bf76345f0b0d3cbffe873bc03908d3bc83ab95aea2edabd68
- SSDEEP 384:BmdLFVZ8ERBT32czPbHmTgK62QxHS7OVpw7EqV:4dLDbRBT32czDuCHsEu
- TLSH
  T12F621919E3E58239C5ED4AF20C73A2011B71EB039D13FB2F49D860965F735898E64BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  XWorm V3.1/Plugins/ProcessManager.dll
- Size 17KB
- SHA256 2191a38b79181dd20e9d52b3c56e3b1d22e2329fa0155be726bad5067c2d70a4
- MD5 7f50e25c5c32c9f8ff91ad53effc08c7
- SHA1 e30b19c59d82f4bd6abf0b03f5bcae5783401861
- SHA512 ed715a1c1a218363baf2e9d34207f37d2a8a05322fd59d0656c3f45c16a2079a4c1ae85b48a061bd21ad0a6f002a596038f6783a86a8026fdd317c4db0e664bc
- SSDEEP 384:ZdftFqxTfNDgiIsCH9q/Y1aLCEYpt1pnrDhg5XkAvfw5bZLnVb:ZdftIwn8TYMXkAv4L
- TLSH
  T1D4723B1EABE493B4C1EC1EB218B396410770E60ADD23FB2E1DD850276E737958B31795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  XWorm V3.1/Plugins/Programs.dll
- Size 13KB
- SHA256 665dcd8409d509bfd79d77c7367c50aeefe1ca893392804145a7c368e13e6e15
- MD5 96cdc5f67e9dd2fc5bac8770380e8373
- SHA1 652d93d22b21ce0d3575f7b5a942b66e66655d4d
- SHA512 663b79e49e5636d330fd82d2721ce9b5838a284eb2d4ba84bb747590ad83916efb39b4219dc2f489110f9c14e4629fcfbc469b9900496801119eeddf5ecbdd09
- SSDEEP 384:OjnqNd9cZMvidxD/nTu1NYTX/1bRbBvFxb:OjnqNyBFTN/13vz
- TLSH
  T13952075973E4C23AC6FE0AB21C7362401B31EB059D03FF2E16E871865DA79958760BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  XWorm V3.1/Plugins/Ransomware.dll
- Size 20KB
- SHA256 1c5d8bf7908b8d38a94ba4559d3d910a3c2dc02a4cae3e48b1edeb253ff94b5f
- MD5 6d761ab6a3ad9c15a91d64cb065f7788
- SHA1 6865e844e66ed9df5978cb7bcf9c2380fcdd4763
- SHA512 09c39d67d699b3715eda5973169f2afb8d5d7412eb25d664eeea3d6fc4942aa841b934a72824571907104b7d5de75ad9890b3383c10ebe47724b4b1fcccaf761
- SSDEEP 384:vVSO27QJHvpebFn0LC9Tk7ff2ji+ZMuqI+sHY4k7EPPeEHtHxh:vVm7Q1vpebF0LC9TqH2Mj7qPtR
- TLSH
  T1A792F62D67E0E171DCBF1AF354B3D2510371DD35A821F62C3ACEB0AA1FB21498295E66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  XWorm V3.1/Plugins/Recovery.dll
- Size 496KB
- SHA256 97d084dbaf65e0395221928be84907c5dfc51d8e0b9d8c8cad659e49e821bd61
- MD5 cecabf12d9b0ad0a1ee42a47933dca88
- SHA1 c0f022eeeeb28eb0ab430253bc994c86baebe696
- SHA512 d84849f1f7fdc41d3fdc5929a8ae5a7f6fb9646ed10867e47e7b9b868bf8ef427b4c70a0455ea368947a3c01d07a515514ec1b624129b0da607b0fb1ef46b9ba
- SSDEEP 12288:YMEW+SHIWnFEn6YwriYW+aiJdIyl1HXuKtMCiK:SW+iIWqnwiYWefrXuj
- TLSH
  T113B4F15827B88A64E5FF4E7EB0B0002543B1B1476A53F79E0FE488E92E71784CD15BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  XWorm V3.1/Plugins/Regedit.dll
- Size 15KB
- SHA256 cd62c8cc46c9b675de1a8628dca32e2a0f2e3b754589f0f97d741ac5d7626939
- MD5 25553d1f11ed55f924809441ca0c8818
- SHA1 6c550d43501034ec008f33aa4474ab6fbbeaadae
- SHA512 cd1d7fd003b5b5bff44e336cd7a9cb41ebf10d14bfeecae0fdcc3a9ffd099c9286e6e4b6a86a80f7e1827f3d0823fa577ee7733fe74a3a70832912f600abcacf
- SSDEEP 384:8jKSC4zdLNUpTmeyAYvpYrQcfx9A8/QYbleZ:8jK1wrUs5Y0IA8/QYs
- TLSH
  T13C62086AA7D58331C7EE0AB318B392004371E71A9803EF5F5FD821969E6719C87907A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  XWorm V3.1/Plugins/RemoteDesktop.dll
- Size 18KB
- SHA256 91e582dd0fe0224a74b326faa35161958aae425df4b6151646b9c330e7bd5487
- MD5 83777409ffa9472a16ca8ac82405fd79
- SHA1 a3885194e9633005838d82875e939ff79c41279d
- SHA512 09211008a5c622bda027b165911eabce4bc60874bee172444db3b95c0b7b148928fb5d81a0ce9b46d5bf49eae22d72ccb98fd6d252768bafc418b1c79dfc7576
- SSDEEP 384:OQfYHHHKs7KD2Z/PY+gQ9ulAdfV9q/T6t5wxt9drOpGrjzx:zR5YPY+gPluSft3rj1
- TLSH
  T128823B5EB7E58375C1AC0AB28D73E3015734C1078503FB1F1DD8A06A5EA3B868751BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  XWorm V3.1/Plugins/ReverseProxy.dll
- Size 16KB
- SHA256 a6afbc76999e2461f73db5173045772c1ae75912d1dd5c9afa49a8f153a94bcc
- MD5 bd851b7e1041a3f0baccd36197d6cfc4
- SHA1 9f30138e51a85b8d43750acaf5e62a76cfda0e5b
- SHA512 411335c7f317f028f33122f64e01f21352b0356fc192feb16485078712f1ad975841df84a0247328dd0c4e15e5f68510ecd6b77b4c5013d07fe31622b7b3b49e
- SSDEEP 384:545RejLUCUPxVPdN7FAv8zTNrxYFXoaFlS9IcPCv:54HGUCUZV1N7FLfaoaFQ9IcPY
- TLSH
  T1A972081D6BF68372C9EE1BB205B2A2005770D605D813FB2E5DDC30970E776968694FA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  XWorm V3.1/Plugins/RunPE.dll
- Size 11KB
- SHA256 142b3db9ceee2c45baae4a39cec35110b7d1a2d4a567d0a3846d546454a38c9c
- MD5 dcef0b57855b19de439a960ab318ccc8
- SHA1 e7379df475d57778cc5758006c30b9bff20f193b
- SHA512 6fa2e98c62bffa471687034ef65812108b59f24a2a9a9669aa4fa4dafff4c69bb4a62011599a4cf92eda1c7f49bdb408796a958a53ff405d76c9fd7e19c5a442
- SSDEEP 192:cbfqh94qP9XFw3l+JNGGOueq1JtSnIW1fUse8po7SLOYN:cbChWqPj5jJtGUse8poHYN
- TLSH
  T14A321A1D93D4C679C9EE0EF24CB222811BB2DA448E57FF3F55E4A0261CE33864AA1731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  XWorm V3.1/Plugins/ServiceManager.dll
- Size 14KB
- SHA256 6e2cf9a6ce187c062019e955ff60f4fc3ef815c130c306272e592accf4fc927a
- MD5 dc65e652272a02747e378395977bd157
- SHA1 9bca82693a41b155a7d9f875416f69b93d35a615
- SHA512 390e93db51e7c71b83c8710d8b36534622d17b2ae0c11f60794a9bfee68ae35d266e392191473929b04ca921f819c6ebda54293d9c8e148a3ffa1ae509baab5e
- SSDEEP 384:VLpmyvwJaBVUP8tTZ1xYsSh8KzcEEJjm:VLppYJIVU09kh8KzcB
- TLSH
  T1B162086873D4877AC6ED0EB30DB353012B70DB059D03FB2F6ED860561D63AC94761A62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  XWorm V3.1/Plugins/Shell.dll
- Size 15KB
- SHA256 201ae5b49c07fda351c4b97dbc25666e70e8e5ab5df496a706289c7afb329e72
- MD5 2a11f28ef6f0a17489ba5b476bc48e13
- SHA1 40cefb38747bab538b19a8205bbf51364625098f
- SHA512 7e74fe0a7c8921ecb87b714a0626c49586a01cae402c35992ed306e3c5de2330e843f6a39ce27fd352d1c7505aef61c124111c55ccfe12bf05ab1eebb4f43baa
- SSDEEP 384:Xw3mb1rUAz2nvV/Vd1vRHfF88XT0L6YpU1b0XNpQ:Xw3mJrUao/d15/vDt1baNu
- TLSH
  T19C623905A7D58276C6FC89B61C73674117B1D306DD03FF2E6ED861AA5D632C18A307B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  XWorm V3.1/Plugins/StartupManager.dll
- Size 189KB
- SHA256 ec540fa8defea128625dde7048d9950b031c34f862b2f0bcf36fa299e7f33361
- MD5 7eefc1147e91cc5d39bb4ba32bae6f0a
- SHA1 de720a7c7091fcdfbcce75fa42a531768e50cb45
- SHA512 c74786c7fdd863dec2862cd73e6a1589be281cfcddcd126e59897ce78bb459b75140d65e7d807eaf2a9733214f371373f22048ce18879b3d844e309f6d45e9a0
- SSDEEP 3072:gtkjKRhBK2A4kjTUsq7EHBAnpK37nXF83+4QvC74Syoh+0KrywT6RXHLzgaUcndn:g6jKRhBKvjTCo8Fm6dfCcn
- TLSH
  T1EB142A4127A8C92BEBBF17F9E0B1160467B4F10B9561EB8A788C15F95B533409A133BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  XWorm V3.1/Plugins/TCPConnections.dll
- Size 16KB
- SHA256 d6871508aa8360a03223704c56036374915ddf13a94127d73f7eb258589578dc
- MD5 ab5991f44a21e87e3b78406f799f08b0
- SHA1 c87f102de6d8a2d07eebd5be82d5838e7aa61f6f
- SHA512 9bbc9cd2ca8c6045cd409d6bc3fb8cde58ab111ef96bf06804291ff789303684a01ea426c88c2a73b232673fd0034403d1c36533f4766a3c64458724aa0fcbe3
- SSDEEP 192:Cjg7Ks3wBH3Ud9eGLVOpkidXiS+O6FtQi11OtCEox0GTeE1tZ/J6IW1Gz/t/GYrb:L7Ks3wcxIdo3wCzTeST/Zz/tF/v
- TLSH
  T1C3722B5C63B5837ECBED0AB208B3A14113B5DB0D8D53FF6E18C8B1655D53A888721BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  XWorm V3.1/Readme.txt
- Size 235B
- SHA256 444cbc7b57b4a6198ee1474fd9623e1afcb8c7a0b180f05e961a822f4365499b
- MD5 85122ad50370f9a829b6602384b1b644
- SHA1 6d0dc94e7fe82650422a17368314da0da58af6b5
- SHA512 a3ccd49bc0424534ba3b5ee558709022dd31d257ca48fd2eb8d7305ec098dc9275e016da332d293b7cdbdc5e91b82c7602c15abc52c0c0c4f3c81d4126b4afd6
- TLSH
  T1ACD0978ACB8A02D00342C240A8848466E7AEA579A1423BA6B88570A40308180397EF3D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31
- Target
  XWorm V3.1/XWorm V3.1.exe.config
- Size 183B
- SHA256 7ea08548c23bd7fd7c75ca720ac5a0e8ca94cb51d06cd45ebf5f412e4bbdd7d7
- MD5 66f09a3993dcae94acfe39d45b553f58
- SHA1 9d09f8e22d464f7021d7f713269b8169aed98682
- SHA512 c8ea53ab187a720080bd8d879704e035f7e632afe1ee93e7637fad6bb7e40d33a5fe7e5c3d69134209487d225e72d8d944a43a28dc32922e946023e89abc93ed
- TLSH
  T171C0122940A8BD269D328A279252C962FFB022A2A024000CF02FAA670B3105D4257326
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32