stormkitty | c660a481788d397b4d2b6f1dc9253914157ad283acc702d2f1d579507c8ccf30

Sharing

Copy URL Twitter E-mail

General

Target
XWorm V6.5c.rar
Size 24.8MB
Sample260720-pnet9acv21
SHA256 c660a481788d397b4d2b6f1dc9253914157ad283acc702d2f1d579507c8ccf30
MD5 8b717eeb1ba294b08c14e15474ae6ab7
SHA1 db535ed6a6351c1e8c715a86e17dd2afc2c4c834
SHA512 81fa1b7afbb1f4c93cb741543c087577d09325ff61c220cfc69b3dfa40d58824dd8eeebf6370c5958a392b1718eabe198d737e2226d3ee7024f56743ea8b07b8
SSDEEP 786432:WyS3hvWrDNT1MxhUlIzidd3By9WOaT7Owo:M3hurDNZGCIid1mo7Ov
TLSH
T19547337533A07DFA38AAAA2E41A380D526D1BEF6A9F485541EB07D47204C5C1FFD623C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

stormkitty stealer

Malware Config

Targets

- Target
  XWorm V6.5c/NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- TLSH
  T156B45C2237E4962BD1AF5775E4E1191B8BB1F8423237D78F8684BB6E1D837924C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  XWorm V6.5c/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  XWorm V6.5c/Plugins/ActiveWindows.dll
- Size 14KB
- SHA256 3a8a40ff39f4921f62b7baf2b849a2239d339ae149a7dd36c05c73d617cec314
- MD5 791204e98ba176aaccccc2324e660e80
- SHA1 67d69444d169b869eb33e8c6b5fffe61f7d6e1ab
- SHA512 bf49708e5f342bb4f6f3f090ed0408669f241822fdc318e0c58cca733f165fe553460af44734366d725cad21f229e8da9db3a7a469a3622c65abbdf2c22f20fe
- SSDEEP 384:fRttr7olU5QrGPbONr3odT8ptsY7XZREDue:fRtuRrGPbHt0ZRED9
- TLSH
  T12C624A69E3E44335C6FE1FB25C7363001370C6088C47FB5E1ACCA2969D5BA9D8B91766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  XWorm V6.5c/Plugins/Chat.dll
- Size 18KB
- SHA256 dbdfebd9a3a5c71629d13876a7392b11b8d45f148e8d6ab8b1509518be4cb7dc
- MD5 e0976c8b7a4282536a86a930afd80f0d
- SHA1 2682265d798a3ea7f6006ec1740d1c37a9ab4ea0
- SHA512 9dc6860d1a107ed9bdbb2e0006aaa49a9114306c334fc14f3584f1ae8c2d1a1b6a9c5d7c5b7192807f33f83bc7e1a521dc9649098b77a946d48b0b2c496bd898
- SSDEEP 384:+MOna4ifKQtuUvl0BY0iYUsBQcrwTKvh6GIKoImfWmWGfN:JKQtuq2Y0lUUvr0pImfWZ+
- TLSH
  T115821829539583B3C6FE2BF64D72E1A043B1D211CA07EF6FADDCB0AA49933528741791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  XWorm V6.5c/Plugins/Chromium.dll
- Size 32KB
- SHA256 a7119232252ef75159f950639e781a0e4060c41a033b365fb87cc0f414daae0f
- MD5 3db4d508119e7a0251db0f4355d43010
- SHA1 fe6ae51ab370169018d2ec4f95d10dfaeca73507
- SHA512 1f42e5b4d544fa5865055f21c8934e96fd7f3286eb8da3255396bd4738752018c99b67839d2501f734f5c6532e6df77b778c04993a080903264b509efb6cc7d2
- SSDEEP 768:lSyQlmUmBlEuPuXfjq2sgDrNjfcVJ5sTVeEWqPkOV1sRduwbKhJLGEY3ZsmmR:0yQltmBlxuXfjq2sgDrNjfcVJ5sTVebu
- TLSH
  T1A7E2184873E8C654EEFF4E759C3965600372A0839D57F79D0AD1A0AA0BB3B908E51F93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  XWorm V6.5c/Plugins/Clipboard.dll
- Size 14KB
- SHA256 b12f58cd1ce87933dd1115e1a0e3a8162ed91c619b5558ac444ca610debba96f
- MD5 9a8516a3245de4359c946608103e2f76
- SHA1 5f5b4ca4e6639e6bd51db1f7a09c2b30122752e4
- SHA512 96ab8ce7d62bc6f972d82af4ffafbec1354fbe112d3b11fb20f15557ef11566f9ae15afbc081be555d6943ff7805d2e3a75ba7fb8cbfc9bd72518210dbf7ec5b
- SSDEEP 192:fh23MhInehHXpqRxry1/X7eOFXgNTer149iY6IW1mX/YHXa77WLusU:eBeJGxy/X7eUSTe5Wi2X/f/sU
- TLSH
  T1B6522B9863E4837DC6FD0AB35C73B2401774C705EC02FF2E1DE860A15EA7A99871276A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  XWorm V6.5c/Plugins/Cmstp-Bypass.dll
- Size 11KB
- SHA256 5b5f4dd71e4fcd7703670e888bf1d2eaf1a5c7834ddff50b869044b39a2e07da
- MD5 82bfe3551669209ba9ea264d41a17cd8
- SHA1 c3b9dd7cbec22d07f47605d4f3d740a8adea4020
- SHA512 05c6694bb725a0d02a5b5d2ffcc868e86b935778a048392bbe51c90f7a6b60d4cee9dcac3bcfceec026c5afd4c2fce11a4e19445f591b50cda2d0e5abbdd974a
- SSDEEP 192:KXpS1QWlPgiqdEquP+GGO9mWbpGkjgyaYcIW1vr/8T4U7aL7+WLEO0AhdW5:K5cjP20mWbEkUyaYir/o4JL7W8
- TLSH
  T1BF32082DA7E18275CD7E0E7248A7E3010771DA44DD23FB2F56E4A10A5D7B38883B2676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  XWorm V6.5c/Plugins/DisableUAC.dll
- Size 1.3MB
- SHA256 6ae9de3990a79183c00057db035934ee0c6ded3a14e158262b7b7e69c9a098a2
- MD5 de3a0b88c7940650a74bb5e38b348b02
- SHA1 811368c07e379a3840393a0de6e5097b99ebdfdc
- SHA512 9833edf4ea1ca83234f203c8404e162c02924471570165d0d31fabe3684bc850e17d365d61e16805822104ba89904af4bcbd956e62482d97897144af2157ad2a
- SSDEEP 24576:hrORE29TTVx8aBRd1h1orq+GWE0Jc5bDTj1Vyv9Tvai4M/ZtKP6cBDjvi/CZ:h2EYTb8atv1orq+pEiSDTj1VyvBatM/N
- TLSH
  T1C5559E0973A4419DFEABE177CA12C607D7B1784A0277862F01A4AB767F337715A2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  XWorm V6.5c/Plugins/FileManager.dll
- Size 679KB
- SHA256 23d1928f053a511749ca73559b72c9b12eda4d9d4b742344a9703fb3ad7f585e
- MD5 00e28bd983b64578c9d23c2981d8b73c
- SHA1 25acd6550d09c1b1a15e3458120a13031dbda0a5
- SHA512 314fb89e2d4925ecd55b6fb50ec49d604d829bf1cc12bbce649976270441cb9d34934dcddf102d47262e32e29ff2ead4d8ea3b5170f89b312d6226443628b282
- SSDEEP 12288:xlr7BUE5n+/zlbI9gJvjDWKgpKhGOXoDDDp0b:xlB5n+/z1I9Sb8KhGO6DDp0b
- TLSH
  T1BCE409203FE8F01FE29A73B6D4D187214BB4A6427296FF8F258446E81C937895C594BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  XWorm V6.5c/Plugins/FilesSearcher.dll
- Size 478KB
- SHA256 f6f9954f949d7708cbfae9ed6cc638446448498cdd5fc0d1eda479c39baa0c02
- MD5 90cb500d0b2f8ad17ebb81da5680ae2c
- SHA1 61fa0ffccaacfd23c92b9f27d09c402d11b30311
- SHA512 dc8986961cb54a2c69b29202bed550f4014e4e0b57d3dc36f6f21493a71be983e4530e83ce97f810b60119424375b2af50c18bbf0b2c377d242e15577f0239bc
- SSDEEP 6144:qAHdfUpnnBuIbE7SCQeGtSV41QJDsTDDh0Yhe6dwxLV/0uhg0BkyORUlKL5i+:rVUpnkZ7slS4Ys50ie6Cf3g0FT6s+
- TLSH
  T1A7A49D412BE8C647F1BF27B2C0E252A1C7B0E455A62EEBCF5D8424EE1D17350E9117AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  XWorm V6.5c/Plugins/HBrowser.dll
- Size 25KB
- SHA256 a8ec5c5e44b81766bfa93eded535484d3f85fa026bda7a5492ab0665557b9e42
- MD5 02630e18ca44a1b38558156d0a6de6f1
- SHA1 d4813541cfcc106f190934d5392b5179d44073a2
- SHA512 dffa9a4c84d195349fb1e88fb097b77829cf557ee229bb59ca42cb28c588b6976b1016b382597d1fac31a624b009662db41765f7eceedb26a415074daacc16d7
- SSDEEP 384:Kp33X3L5/QrX8nB9d13+6HGLReMWaFnp9l/1DRVTbg0Ut4xh+7fYMoKABnR:KR3nL5/QrQ13ORR9bTbz+7YMoFBR
- TLSH
  T10FB25B4967F49630E1FD0A7598B367148370FA935812EF8F0BC9641A2E3B7E446247EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  XWorm V6.5c/Plugins/HRDP.dll
- Size 1.7MB
- SHA256 35be9a19f1a0140133a1ca63a09e899a6a7f5f8616369ec89445c330ad287f6a
- MD5 4e75f5442c33f7651b38c38a8fabfe5b
- SHA1 4262124bdc079412b5cdf25d02ea6559b7afc3af
- SHA512 af4cfe48d7f5b571c8e5f80fe4e2797b0ad376d21f26acf16aa85668d5c86242803a1b60d3a290823c1bf3cba5a9108b17d4d1e84a9c4b882ed8e4efe15c37e4
- SSDEEP 24576:srKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:ZHZ5pdqYH8ia6GcKuR7
- TLSH
  T18D851918F6D8423ED857D2359A7153B2D7FAB9482F20738A2928075A7F2B3D02B3575C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  XWorm V6.5c/Plugins/HVNC.dll
- Size 85KB
- SHA256 a1a8d50eadd1f75200ca22d4cabfa6084c77db092973c9125412c1acfd08e531
- MD5 dc0edfb24acd1b371e68ccce1afcb6e6
- SHA1 1887adf4e1496c1c2f8cfd80206cc2856a63cab6
- SHA512 652d28b636d95cdc94c2512df42dfaab6d5a23c86164191914e044ebee67af38019914f025b8a9cd7a805d39b92fe1d4d93f01d71fea163e91e71308c7b55cf0
- SSDEEP 1536:4qhezATwSM9jwX0o71Us5XttkzU3mfICaRUlh:/hezVpjwRp5XttkzUMIC2Mh
- TLSH
  T179832889A3FC4610F1FF5B7598725A204BB1F5532932DB1F22E5906E2F777818920BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  XWorm V6.5c/Plugins/HVNCMemory.dll
- Size 39KB
- SHA256 f1f362067d0e613b844e961c9b5c380f95cfa1333436e3431ee3accee1807804
- MD5 b4e4c31850ab3d32f71fabb658c77c26
- SHA1 2071c1d767d4fa868a1e48438d862a98b42b7251
- SHA512 4a9c506b24b6e3d0aa03a1d15244507318e1303c0f7790db735be4ed056488da39ccd07c27ec8b3617bd951335e670d1dd9d5131016b7c9d32236a05cf418533
- SSDEEP 768:xEyXMCBlQ6Kms0noGYMyKgDWj81Y6Mnx9oQog1zqGnf:xLXTa6bX81Y62o87
- TLSH
  T1A0034B4A77FA0221F1FE0AB5CC73A7289331F5934516D70E2AC960696B73682C510FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  XWorm V6.5c/Plugins/HiddenApps.dll
- Size 45KB
- SHA256 3f24e2ed2972d3987bb189fe69830ab8a4ab56588db0ef0763145a78558abebd
- MD5 ed681170501c5728202e0eaef0c156e5
- SHA1 119eb6e56c58f0e5d7faa06a993be01db378804e
- SHA512 c32d3d21e3d1082c2b2063ce7d5703817376d8318c8720908ec38c64c3bfee1dac54a531c0537a66e0f5e65ce63c12a340ccc416f76b3ae76391dca2baa841f4
- SSDEEP 768:kEN0W4dmvWt9VG2LqIvwYGYRpXpWk/x0qqBi3qMG0gpfN3ff+I1:kdmvWHVGMVwtYRtpl/x5qIXdEdX+w
- TLSH
  T1F2233848B7F88620E1FE1B3AA87363149374F4A71A16E74F0BC6A0592F723C45758BD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  XWorm V6.5c/Plugins/Informations.dll
- Size 22KB
- SHA256 4a7b655b8e8cb2490b694f2cc090e36d87e53eeb432e1aebe3f3d0c73fa8ea12
- MD5 634faab5759194a8d4b774c0d18d312f
- SHA1 54d4d1986d672191eb13968027ae15e25a8fd907
- SHA512 183ea23b2c73bd8bef2befe2cf01fe74b21358412ea8fa929230560427dec80f1083103ce1dac6f3ad22581247bf65b599faded47346636130a8f7be7cd0d86e
- SSDEEP 384:hCUEeL4D574MvGjydqXwxDJlw0n3TmyxhxJNgSg4ZOF6K:hCXeL4DSjydqXwx1lZjfNWl
- TLSH
  T12EA22B5837F986A5D2FE1EB14C32924543B6F60B8C12EA1F2DC8909E1D63B84CB55B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  XWorm V6.5c/Plugins/Keylogger.dll
- Size 17KB
- SHA256 60a48be5365fbda858b6a59db2ff28ce5ee753fb8fa29d09288a9e3a97591b08
- MD5 e5ddb8afb6ed9733450af8eb09d73c2d
- SHA1 52cf60e00ddf8cdfa879c42b70b0e29cfe567a00
- SHA512 4fddea760271540b072e54c52a53fe8581023de9c0bd9126345c1aa72effc0648d17d22e31ae062c0d7e1d1487b282df24179a2fa8b103e5ae3d1d09af5becbf
- SSDEEP 192:2JV/HNfwK5RSpyv3RFRtO1Lnq4Ur1XneDN6IW1Y6Uph1KfaA0UbnFWL2qV:8Fl5Rp3RHtMO4U5uD8UpmZ0y3qV
- TLSH
  T1F282395C77D08379DEFE1EF2583363011770F2069903FB2928EC61665EE3A898350AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  XWorm V6.5c/Plugins/Maps.dll
- Size 15KB
- SHA256 e38fe17fc34b6d61ed7744ce01aee5ac24b50e89eb22e617534a873e0c34ba26
- MD5 0da61a3bfef30fea979f81b6e1fbe973
- SHA1 2fdf58edb525dfdea4a2fb90fa7aa49c02c0fc80
- SHA512 8b637aaa35a8e87036a36239f46e049b43e048b01f2f5fbe12108493e4acc226ff1df7c6fe3c0009d4ef278039bc6f03afb9d68d80a200d452c3b1d5435a165e
- SSDEEP 384:wBqmqunML6thaujkS4jtepa9BX/bt3F2:wBqmqunML6JkX5x/pV
- TLSH
  T19F621916E3984276CAFE0FF65C3262001776E609CC07FF1E2DCC10A66D5769A8E65762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  XWorm V6.5c/Plugins/MessageBox.dll
- Size 14KB
- SHA256 02ed6168c76a7a0da54cbfd0196e56972abcc84934f742ad27401bc19cbfc0c1
- MD5 8d6f2371819c772aae45153c7432875e
- SHA1 695c1548dce4ce9e11f22b3bc68a208e3fbe4270
- SHA512 8121a9f9d4ba6e422f0237dc03d214e7190172fe5bd86b8eccd9896fa53521c2c34ec43f061136bc1f72a749f866418a3b8a7041e93cf8f24ecaeb7130878830
- SSDEEP 384:J6lIccn3tURnUuRUUVT/95gG3UX/kZKUW9:J6lIn3tUVbVa/kZ6
- TLSH
  T1536219A977E08339C6FE0FB66CB262405771EA099D02FF2E5DD850525EA7980C760F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  XWorm V6.5c/Plugins/Microphone.dll
- Size 540KB
- SHA256 c95a9fc69cd48558ecc6c248050b6cfd12a10a2ef1862ab8169172b5e8ccc605
- MD5 5a755cc5eb6cc70ef5ef0de13c9a3cd4
- SHA1 be2c925974a2057f3c7279afbdf4861e3f92a4f5
- SHA512 b281cbc2c8bd3da51a9da1a984d1d0a98436cd328cfdc9a38e236b55b56829ec393b25d34caaf54f23cf49e88b4c609de0bccb2ef3a9a0726ca08ae1078c29fb
- SSDEEP 12288:h0OeMv3MrIb8CkZK2bg3WiPpnzrq4bDwsXP:OOe+WIb8CkZxbg3Wghrtwsf
- TLSH
  T114C46E11BFD4856BC06F33B1E0E20B2B57B5E48A7726EB8F14808AEA5DC37525C417A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  XWorm V6.5c/Plugins/Ngrok-Installer.dll
- Size 400KB
- SHA256 19dd3a21f6208613ae4edbfe88af63a1279c013426a678d40f1c051e33140b23
- MD5 6c42e6d173c375de5dbb6aa7c26d18f6
- SHA1 93f74229f73c952a6c99a6e8630b2adfbf181b04
- SHA512 895898fd0bbbb1412b7008483d83757cdc6796d1fdc9c392d6aa707afb0b9712018460ed4f3515aff5f7ebc09ba3038e0b6391a0390984d6fcab767453c8b543
- SSDEEP 12288:Qs6T2x75lFR/RG+BUKPqnwoCuYKIT58/M:QEB+4+1CuITS
- TLSH
  T16D947C107FE0C63BF1AF97F1C162419687F4E05AB79AEBCE6C8554ED28423509A163E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  XWorm V6.5c/Plugins/Options.dll
- Size 30KB
- SHA256 ad200fa6548cab2882d371c1e2794b344352a9b76ad2e4caa936b2290454fd43
- MD5 1de9d444e80c844134bb13997ef39dfd
- SHA1 3c51df31eb8c99757a39632d73a288a3a02f3474
- SHA512 912fc6d6796ee74306de8ddfcec96ef29e32e5956aa1dba5b48de31444b7a13680bc00c8391117c041753574b08ea6db67953a0c9cd85cff10532bc4f9325473
- SSDEEP 768:xLxkuz7dDCH839Aybgkf/sGRNW9p9dPjc8:xLNHGUZbgQsGRNW9pL
- TLSH
  T181D21A017BE84629F6FF6F31EDF622158A37BC4BAD22EA1D0890101D6C73694CA51F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  XWorm V6.5c/Plugins/Pastime.dll
- Size 17KB
- SHA256 ccf5f8b88ac6f443073df485dd51cbfa3fe750473fb01fb61019d92a62288f66
- MD5 ebda2d8d9e0058c8fee1771442a5238c
- SHA1 6fb928498ffa697a43f7b8eeb9176c75355c9053
- SHA512 2699699e82eb0a46ef02643490cfbbd79dc71a8ac524ba2ffc17f34783a157c6b59c8853156423315c3d86e94cd34fa810228b6376f3c7ae521e7cb6090ca767
- SSDEEP 384:QK9Y5jI8MYODPqePW1vepi5zOY7//fNXsA8/h3U:QK9YNI8MVDZKWwr/KA8/hk
- TLSH
  T1A48229255BE48371C6FE1EB248B3B31003B5E242DD12FF1E49D86156AD73A85C760BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  XWorm V6.5c/Plugins/Performance.dll
- Size 16KB
- SHA256 053525c14915cb1667a5360178c5518448aed5513cdb9cb16e106b20094776e4
- MD5 b8ef85d25c73f9004316d27e1912db9a
- SHA1 bcda6b397933e9197ac5f5cdb2298f3a02a4dc5a
- SHA512 bb96c9bb532223746aa3a573c0ff3ac9d9b071f77bcc9f84775274bd42a57797206536a81d2c117c97075d0b4751b50ee7543189aa3a2b4900dcefab28770384
- SSDEEP 384:ftpW2/E3moTWD1XTgOw2QxHN7yVpHyQ+:FY2ImPRDKHPL
- TLSH
  T138722A19F3E54376C7ED0EB24972A20117B1DB029D13FB2E4CC870A65AA3A988B51B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  XWorm V6.5c/Plugins/ProcessManager.dll
- Size 19KB
- SHA256 ad5ea588effe4b4c484fb7343881b1820c88924a40948431e0884b9ec523b281
- MD5 1392f96745ac358178591f5187bd97ff
- SHA1 6e394c362ee287822cf62e33da73b10fa0ec8f61
- SHA512 0005f801bdfe98f47b8466debb17984f31568f975f2fc0d34a485cb26de8adef1b3052cd7139f4b722e889c0cb08070742f323816cca2b003cd29b4e4f6c8308
- SSDEEP 384:fRdqZXY/oSd1PTQLvLwLadRtZa/rDvDSQUT5S97/Y5bLOEYQfwrpn45rDhxn1kAY:fRdqZXWrQPkQtZqrDrlU+cYi1kAvZ2
- TLSH
  T17792185DE3E4C3B1C2AD0D72587356510770DB018E23FB1E5CE8A0676EB36E98B22766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  XWorm V6.5c/Plugins/Programs.dll
- Size 13KB
- SHA256 b430c95b3ec7aed1f861a815e34b6cf863b7ec988047f3d12a2069d9072d209e
- MD5 cdc63b0a5d5ac1f234c41c68bfef9ad2
- SHA1 b7f48745dcfea2e60f75ce6030f9187d2aa3dc80
- SHA512 52a350e46bc2fad4c6f096526af2814681adfd6f766e01d87b161d8d25e1805ce95d9546b2d7d53abcd873392b87a7609ab11042910f7a7b7550f60ebdb33a52
- SSDEEP 192:b3eKcfO/TCOAOG+uCno9SFpoFmGv4O4FgkT8zr1P9YD6IW1GX/V3yd0y5WL2Vb:CPG/TCXF1STSAdnTu5lYTX/NyKy7Vb
- TLSH
  T166521A59B7E48379CAFE0AB21C33A2411B36DA04CD03FF2E29E851465C776948B51BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  XWorm V6.5c/Plugins/Ransomware.dll
- Size 20KB
- SHA256 c26a184836b0c3828a9054270ec5cc70af927ff140e12133687ec886fd60f4c6
- MD5 c63f44de68077ce8ed9fe94dc603d295
- SHA1 66f1df7f96e9cb503c8dd08033a8d0aa9cc01215
- SHA512 d4237fc37d59322a7624bbe6bb90a2db980b3a25dd06a4de19b610e00e00d022844cf36110eb7886ad24b8d00fa42cf0c9a3ad38fead05344a3e458fb948507e
- SSDEEP 384:xVSO27QJHvpebFn0LC9Tk7fxxOi+ZMuqI+sHY4k7E/eEZuQZh:xVm7Q1vpebF0LC9TqZlj76tkg
- TLSH
  T13D92F62D63E0E175DCBF19F364B3D25103B1DC35A821F62C7ACEB0AA1FB21494295E66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  XWorm V6.5c/Plugins/Recovery.dll
- Size 1.1MB
- SHA256 28ab8b6aaba021460360910909c0fcdbc6a593da96a9820a439550ae240c18fd
- MD5 c28989d92cdedc1ef5f0d27a58190633
- SHA1 ace46cf680ce816851a6cab8866b6eb1977b9f64
- SHA512 321f4855618379862667f7890be2c813c4f26c0477c31328e2f85830e3604de54100cd14054c22e9cefd7fe4a29bb1838a3ae4b62cb023dbcc824e0d3f42572e
- SSDEEP 12288:alwS2DXI0GVFNFfcaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc5cbB:iwSmHGlc805jbmbXM7g8+M9JC+
- TLSH
  T126354B507BE8DA17E0BF23B1E4B20A451BB4F851B3A2E74F544861ED1C62384AE553FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  XWorm V6.5c/Plugins/Regedit.dll
- Size 15KB
- SHA256 e13989fe43bcc3a87fe167406309e7b47f7fa3d9628b43c319249c4fd4fff6df
- MD5 530c5688a2df457600598b01caff2d94
- SHA1 5eb84b730a87ef3b9cc9629a3873e9576f8f57cf
- SHA512 73e97792b26ca53e612e9f8f03ca69988eee943896f9d048464fa7fb8336a73883169c1656f50fa2f47043819c3534a16b38b03750eb7f3dbc1f446f072f21fa
- SSDEEP 384:/ZAOzwQW4pmewuYvpYr3fSr9A8/VlQeZ:/ZAOMrzYOA8/VX
- TLSH
  T182622A9AB7D08332C6EE1BB20C73A24157B1E605CD07EF5F9EDC10AA5E132ED8741669
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  XWorm V6.5c/Plugins/RemoteDesktop.dll
- Size 18KB
- SHA256 cea86d652a6f8a3efb651ce6e4796b94497918b904a82e27a8f3f9842e603eca
- MD5 4967b13b95885b1d32a58bdb0535bf4a
- SHA1 4bba955348f786938632acd62d037f466ec362ef
- SHA512 466b24ee228f3bc822f33c944dd36d36d4905c1224371e8a4dc0a53b3848ef60b1bea14bd847dac00f640252a75e84849c98331effbd1e05b53480945984e737
- SSDEEP 384:+Kr81F+CoNFZpeg7qX+mKBERFjt9l/C6I5YxBXWHeVFjwJ:NTvZY4gDRbXBLjY
- TLSH
  T18A824C1D7BE48379D6AE0E7948B3B3011738C2099C43FB1E4CD8A1A55EA37C98B71765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  XWorm V6.5c/Plugins/ResetSurvival.dll
- Size 12KB
- SHA256 a9d9289bcbfd92c61478161862031894ecb7b0dea94f25846d13388e665d6f19
- MD5 6414251b179a478ca15b5cea955d0075
- SHA1 48ecce6204efd6fca67734f5374da3714dc50449
- SHA512 c3348f05e5b91cdf0571a7573bae9dd2ffc8ba587154134ef5569d4f6d604d0cfa4a95f925057c5090ead80beb2fd4319140968a8f41bc4e1cccd82c24b0ec26
- SSDEEP 192:ybErIEqk7WeMSJ9MJQ7JNPAGOOKji4+YhIW1PnvN8BukDgTqQVmA3mmNPCFLWvM7:ybQ7/TGQ7J72+YrnvuAkDpmNNU
- TLSH
  T13F42081B93E44271E9BE1A3A4DB192030772FE848837D72F15D9750E6DF3640CAA07B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  XWorm V6.5c/Plugins/ReverseProxy.dll
- Size 16KB
- SHA256 c131d44c17637a5b9a90a31c71239b66d96da522b4c834239e299973264c75bc
- MD5 d6a8df84bad8ad91f8add49b53205474
- SHA1 a9eead0ea0840259fc79286d483d6e55b1f7c656
- SHA512 3c83e300f63ca53e3c12315740936d6e215875e215f7b9cb6a3db1b427af38025ff10d4f359876c7cef197bcfc23f63cc4e1c3298d8664813e6c65f25675ae55
- SSDEEP 384:0NsDP9fBkZ3pBkHEk8GZT8x35UzTNnrYFXoMZlS9PP4T:0NuF+ZZ+mwTI3KfEoMZQ9PPC
- TLSH
  T1B27218AC67F08375C6FD0BB34872A2016B71D605D853EB2E5DDC70960E63689CB84B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32