Overview

overview

6

Static

static

5

XMeters/Ex...re.dll

windows10-2004-x64

3

XMeters/Ex...re.dll

windows11-ltsc_2024-x64

3

XMeters/Re...ry.dll

windows10-2004-x64

1

XMeters/Re...ry.dll

windows11-ltsc_2024-x64

1

XMeters/XMeters.exe

windows10-2004-x64

6

XMeters/XMeters.exe

windows11-ltsc_2024-x64

6

XMeters/or...re.dll

windows10-2004-x64

3

XMeters/or...re.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    3ae8faadacc89eb0d961efc97b57338e778354db4871cdb3eed3a6c59f1692e1
  • Size 2.4MB
  • Sample260807-dw95kswfrf
  • SHA256 3ae8faadacc89eb0d961efc97b57338e778354db4871cdb3eed3a6c59f1692e1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discovery

Malware Config

Targets

    • Target
      XMeters/ExVoiceSoundWare.dll
    • Size 253KB
    • SHA256 d77599ae587fb668912ca64214f2e76d36ada7ad5ed1cdee274aba03958bdd55
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2
    • Target
      XMeters/ResGallery.dll
    • Size 255KB
    • SHA256 668e9d89716eba8b43ef3f582e2a796878f1cbe0544a1692c8679696f5924860
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      XMeters/XMeters.exe
    • Size 3.3MB
    • SHA256 b6244472652142b0121bf7f1292e0376e19298b621103686577a4471c9a22997
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral5behavioral6
    • Target
      XMeters/original_ExVoiceSoundWare.dll
    • Size 492KB
    • SHA256 f5108942efc72f0441dc4cc5a5ad0c8880a4fbadeed73b5b8a3bfcc1f470752c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks