stormkitty | 91f5ea61bd6f970209c8b08bc46532b2a7c2c29d9a4d4fa3496de74eb9d6a0fa

Sharing

Copy URL Twitter E-mail

General

Target
XWorm V6.0.zip
Size 41.9MB
Sample260812-e4h7hayekg
SHA256 91f5ea61bd6f970209c8b08bc46532b2a7c2c29d9a4d4fa3496de74eb9d6a0fa
MD5 08ab9dc85185d31aeee1b707bb4c113f
SHA1 613f8b9bac6f351d31912f1bf16327f6b99dab3d
SHA512 b280d8e68747c9f8e13fe0a31ba6dd96706a19b828489b53cca08d6ef1370d8c8827316a017c6e378f700acdec63394806e73844e0566ebdc27edaa72a2a7959
SSDEEP 786432:+CegXmrCT0kw0P8nsyZ2WHTKK06k3e4SfWZc/Sy2Q2N/72+Mmz2b281lQDJpSj2f:rXmrCTvbPByZRTKK06OePnvw2+PydbQj
TLSH
T1A1A73389A59A04F9CEA8B2B397586C78DB498CFC671F482BE58F0754DD5B6C810C21CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

stormkitty stealer

Malware Config

Targets

- Target
  XWorm V6.0/NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- TLSH
  T156B45C2237E4962BD1AF5775E4E1191B8BB1F8423237D78F8684BB6E1D837924C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  XWorm V6.0/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  XWorm V6.0/Plugins/ActiveWindows.dll
- Size 1.6MB
- SHA256 5d7d2f09b0f9e274f64ee35d4fd986668bb9cb938cf6c44253634e284fc0e921
- MD5 e3c0e4bec40771d80bb3e3932fa88ba7
- SHA1 6ba82ab518dbd7ad6588c5b64965e741f40fcc5b
- SHA512 ea473e2de9aa3818d5e37d4c5b6ada48e74128cd66f2235c2143d1dee67c17aef4e7b93d2719f930bd9163262bf59a5643973476dc2343e15734f32452a13483
- SSDEEP 24576:lCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:c7uRfbQswUZcSByYGv5u
- TLSH
  T17A759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  XWorm V6.0/Plugins/Chat.dll
- Size 1.6MB
- SHA256 7c64c646d22f95d109e9832c7245d38a1484bdca1ddf14b544e6555448cdd513
- MD5 6a06c28ead10e020f4dafac0423fd9cd
- SHA1 eb11db4d8820b80ca0f83d8fe011399abdaf8180
- SHA512 a1ba0ce614b41b629815b8db8974ee14c9cf6c4a930b02ec3bdb38fee05f05788c0d671d120f685259ce743b6c2d5e02eb9051f9d07381775b0ab9cf71bcfc34
- SSDEEP 24576:ICs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:T7uRfbQswUZcSByYGv5u
- TLSH
  T122759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  XWorm V6.0/Plugins/Chromium.dll
- Size 1.6MB
- SHA256 2b2dfd13b40c5a7dd3754d43f07410052b3894fb80d75a7e7fecf2cb5300b90b
- MD5 79bf02ce63e67e0a9f6a8934bf6f343a
- SHA1 a25e2270ee4a3fd599c04ca9e34c2e46c3a04656
- SHA512 d03dd276f78fa57e8400c58c39c72c49c959920a152b8c8673b771c5947698df0cb36a3313dba162935bb66d4ae78fbeef85ef11cfce36cfc459c0bbd70dd75a
- SSDEEP 24576:HCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlfC:i7uRfbQswUZcSByYGv5u
- TLSH
  T1F875AF62B69AC1BAD4ED80B9897B961EF7B6784407348BDB12D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  XWorm V6.0/Plugins/Clipboard.dll
- Size 1.6MB
- SHA256 04b560b045ce83e4ecc6d052080d4263e590cf67409a38f31f6bbd7324dadb8b
- MD5 aef1b7f2665da23fa6449036ba64fe33
- SHA1 ebc4088171e554b0368155501d3c3d2f4b4c3ab6
- SHA512 a635cf53e870f1eba44ca2fc111a6d951b5b0e2d1641b0486b580dcea04f461e9faf77c63e4c6092d4636a0db3c7d8a1563e1fc6cf3128eaec0ec1d172b77b94
- SSDEEP 24576:jCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:u7uRfbQswUZcSByYGv5u
- TLSH
  T120759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  XWorm V6.0/Plugins/FileManager.dll
- Size 2.3MB
- SHA256 15d73e99263c2c88731cbb4b915f6de55dde33d06556fb75b5f41adde7fd3134
- MD5 c176399595eb243d5acdcf35a80f5d81
- SHA1 be9d1d8a1bdc3c3cef42aecce77947fc3a6f5737
- SHA512 3f21a8d4a63853370a0e47e8a91d697a1ff96219babb226cdf66cad3e6728a06a40fca7ff50c12678eab7896d9da3dbc17f1dab3ab42d6374933b1b43e81f5e9
- SSDEEP 24576:B0UvjCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlfjLy8Vbh7MGWM33:Bdvu7uRfbQswUZcSByYGv5uRy8V7ICa
- TLSH
  T1BCB5AE2277AAC17FE0BE41B5947A862AE7B274410761DFCF12D4167D1EA33E01E39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  XWorm V6.0/Plugins/FilesSearcher.dll
- Size 2.1MB
- SHA256 5b2e35024b7d1f7369d0ff09a6d765958f8a8a37fa5016e95874943430269dd6
- MD5 ce7e4278984ab5aae85023aa7052fd0a
- SHA1 d6771d70b6b5e97f0d313ca9c3dc7c19734dc584
- SHA512 1beda73bbccb2ce9b0f8d99f35c8e3ba325d982cae82357d5efebf7e8e16fb206922a9c1ea78a4cd07d95ce0d61ab3cf6d8fcb97332bc7d592cc47a2b7a5bcdc
- SSDEEP 49152:EL5R4mjF7uRfbQswUZcSByYGv5u7NX1+q:EL5Sm57ul5ZNl
- TLSH
  T19FA5BF22B6D9C1BAD0FE42B984BB955AE7B178440B38CBDB12D4166E1E337D05E39313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  XWorm V6.0/Plugins/HBrowser.dll
- Size 1.6MB
- SHA256 f3a1ddea6cce676bfa3f0bd2507fff9c34764879862be3d0d944b8c07d0f09c4
- MD5 b922fb5a11ce558131809f9953acc166
- SHA1 ecff9c78fe454b443640e6bab2fed5d7b35957b1
- SHA512 fe408fddd4049e352d4e3b33d074b0ddf9f39f02b6da5cdf7f5c8f8285287a06f74c94cc99973beb62abc36f69f61ca558b06ba5450f9f0a5d594ee20b71342a
- SSDEEP 24576:yCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:57uRfbQswUZcSByYGv5u
- TLSH
  T103759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  XWorm V6.0/Plugins/HVNC.dll
- Size 1.6MB
- SHA256 51e642ccb7d17770ee4c34077f95f4b15108bfa6380ef2e1caa3ff80b49721d3
- MD5 1369a5fd749e7a51d100bd1085c66a5b
- SHA1 485c22638cf0bdc51a67ad449ad2e8d2a94722d1
- SHA512 ceb35de42fbde0f34f0a2d32a792b890c1000f0b4d2089ef5fc568d02fd38eb723665ae18c210e600b5f1a191b117d8b75a568c5091c899b46769e540b445db8
- SSDEEP 24576:rCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlfv:m7uRfbQswUZcSByYGv5uF
- TLSH
  T16D759F62B69AC1B9D4EE80B9897B961EF7B6784407348BDB12D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  XWorm V6.0/Plugins/HVNCMemory.dll
- Size 1.6MB
- SHA256 c51a6c2aae865c8e7ca285b8403237b1975738a22c89e6a91d388535ae21823c
- MD5 d54ca2b00cfdd43647886433ddf78f9b
- SHA1 be70d01429652eaac90616bd096e976158e0d2f7
- SHA512 486ad36b1ef32b40b7c8aee89e0aaa00a71dc8cd054733ccec64bc5bdb57c3826a1063ea8a13a4ee3fa9b11a4266b52d8daa3f354aed08330aeaca2cddb539fd
- SSDEEP 24576:zCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlfCK1K:e7uRfbQswUZcSByYGv5u
- TLSH
  T119759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  XWorm V6.0/Plugins/HiddenApps.dll
- Size 1.6MB
- SHA256 1cc5ed0227aff0a8066c2a34ab08e3e1605910ab87d48538efd0e3d7bcf8cb49
- MD5 01a90b36d48786a321983f09d350d163
- SHA1 44eddb6bd9a1312edd560aaf4a59caf62a613765
- SHA512 6cf35bd7f0edd34db5dc1a90add61ee5527a99f0ccff8c146cbe1160cb71bab0e30e11c90f029870c75c128014db6963e4a8820035c009e809b2614ef705c999
- SSDEEP 24576:MrCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlfsxY:17uRfbQswUZcSByYGv5uy
- TLSH
  T134759062B69AC1BAD4EE40B9897B961EF7B6784407348BDB12D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  XWorm V6.0/Plugins/Informations.dll
- Size 1.6MB
- SHA256 170281e79fcdfaab997e001c43b40b0c263074d3470be4dd355a7c9a5a187c8c
- MD5 f023b857d9f5d127a9f6e8a1557aa6a9
- SHA1 da15b624c95b5263334b2f1b2c2c5db258ac125a
- SHA512 dcabed2dc5835706ad5358d564ce3a566e9ea1baab15a43816e41366c9cbdd771ee27d733148f587afab26e1f19d6248dbc8c6e21f7367fd4f0bbe497aed0c8b
- SSDEEP 24576:ZCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:w7uRfbQswUZcSByYGv5u
- TLSH
  T1FB759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  XWorm V6.0/Plugins/Keylogger.dll
- Size 1.6MB
- SHA256 9389ca12e6f0d9657ae4193d038c8dea8717f171340f56c3b1c078cfe4f3b290
- MD5 9eb8553f45e2aa12d296231a669e3793
- SHA1 8161c51a75456fddb71dbc431db3a4d307618df4
- SHA512 5f6b34ea6bc6a8a223aaca14cbe97c513984fd9b7b657d45d60b6991ea2a48a09082c085b930cd99df1d8497117a486efe3d475de05c3a401a3b28884bf708ab
- SSDEEP 24576:SCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlfs:Z7uRfbQswUZcSByYGv5u
- TLSH
  T195759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  XWorm V6.0/Plugins/Maps.dll
- Size 1.6MB
- SHA256 9368027ce3cbe90de668959b5adae236d0c9d75edc6d3cd2b69523bfee7a532e
- MD5 a7384453e5e7897c2e751997f2c4bf4c
- SHA1 4fb8777a6aafd32662381f213ced42adddcfe258
- SHA512 d84b16bde3b847ff2c3ef198734e0c1789abfcf31438178b758e4e02899bfa219152840cc4100090c056d1558028e6f0f0acbd01d9ba4a7714f02b7abe5b51f7
- SSDEEP 24576:zbCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlfQmB:z27uRfbQswUZcSByYGv5u5
- TLSH
  T15C759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  XWorm V6.0/Plugins/MessageBox.dll
- Size 1.6MB
- SHA256 c2ad37a82c90777e2038bd75a985bf06b597f13ccd519c0f5bc5f0fa6ab7f268
- MD5 e1982ca1368b579865176523fdb08c94
- SHA1 170641b991682ffcf01f8e578dc29cdaaedae952
- SHA512 53d0b39629c9fc67ea848b7948e459f04ef0c0ad9d5d2022d8eed3e9dabeec56776f5eae4381bce07d03049561da0de30d051487bb628978d676755141558c88
- SSDEEP 24576:cCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:H7uRfbQswUZcSByYGv5u
- TLSH
  T151759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  XWorm V6.0/Plugins/Microphone.dll
- Size 2.2MB
- SHA256 d63f9823b3fe95f6f25b820e6ea00e7d7bfb6ff4d9c511533a3ec5f26045eb47
- MD5 b0297d35e8cba02dc33277333f06a2fc
- SHA1 05af6c0f34a819932c0d14a18c04f7779ca7f5e4
- SHA512 9a00cacc0594f988726d3b51ea230bf28a8e96777af8ea5797399de86518c509cfcbe46070c9fa67372b801bcdd29af2888628b0e77733da8d027532595ca21d
- SSDEEP 49152:67NZ7uRfbQswUZcSByYGv5uJyu0eegkq:67NZ7ul5DyQ
- TLSH
  T181B5BE2277E9D1BBD0BE41B588B64A1AE7B2B48527348BCB12D4176E1E737D01D38363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  XWorm V6.0/Plugins/Options.dll
- Size 1.6MB
- SHA256 5838c03713eb20b218c93c02bb955386192ba9d11b1028f704613c18032d93f0
- MD5 a88b091ca4175c76474281d286c14724
- SHA1 506b77ad660e1d11a2887bfa5d8422d6feeccc55
- SHA512 ed1a7486ffcf10f11e49f3f79d070d1a0614c674c12bca7fec8a0534254d57c5db531129212af556aa287953047ec6e96bf7be4c9d9e31dda2d183b2b5da5970
- SSDEEP 24576:5Cs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:Q7uRfbQswUZcSByYGv5u
- TLSH
  T1B5759F62B6DAC1BAD4EE80B9897B951EF6B6784407348BDB12D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  XWorm V6.0/Plugins/Pastime.dll
- Size 1.6MB
- SHA256 08e37d1bfc11b44dd49158f3f4bc747f541c6cb91e8dfe27091c1733d4ed0585
- MD5 8db73fd9c69d936457fb7559e92e6dcb
- SHA1 f5f013ec843b24f7a7379478957646bc93c015d1
- SHA512 caf78c2385eae6d9ed0eda6d5b71bdfcefe83b4e02767af61cb208c256eac8e3cb2498912ff07285bb104148f60c4870e87b48fb137c8551f98a42b5ff0de7b4
- SSDEEP 24576:fCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:q7uRfbQswUZcSByYGv5u
- TLSH
  T1DA759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  XWorm V6.0/Plugins/Performance.dll
- Size 1.6MB
- SHA256 32578fd3fa29cab2a453866f89d695f66730b56dcef6c2e8af0ac048cf6f4870
- MD5 4baf06e6a9b1b46a64941e9cd2c7ef9f
- SHA1 86fce9edcc0d35a44b094c3517598b785dd6d686
- SHA512 694666de58769a0f8ece3f5f50e7bd6378adeacf92c0b12be8d2935da02b7a0a01f8b4dc883de140bbaf226bffdf118042ba55042c141143aee44ecbf696bce6
- SSDEEP 24576:rCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf8:m7uRfbQswUZcSByYGv5u
- TLSH
  T1B6759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  XWorm V6.0/Plugins/ProcessManager.dll
- Size 1.6MB
- SHA256 09b6033a47eb400afdc8c6fa109c23d9b39e2a0358ccc3b58bdfec2c1e6a8f8a
- MD5 47f44d6ffa9c528931f06a31b4ee58bb
- SHA1 f1b0fe18a2c63a172a6af758813d15d28d3deef8
- SHA512 e008b65d5dfe084142cea4c2a7d4998cd414aeb735932b2fb32e19a83bf4e3c0897e286cd36ed9d01cbf6788b13b92aaae9dc86303fd3b693f7aa2b351f83358
- SSDEEP 24576:UCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:v7uRfbQswUZcSByYGv5u
- TLSH
  T1EA759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  XWorm V6.0/Plugins/Programs.dll
- Size 1.6MB
- SHA256 8b17fe8a45c6133290610ea623dde9ef38ebc7ebb2b6b43a50dc6bfe6ce4c8b4
- MD5 e43679d9acf9a704b14983926aef61a7
- SHA1 77ea6253469936e161cee948277285ea38bf93d3
- SHA512 d3e2322248302f3a5f20e8bac642da856d098dbfe38344c44a9d64c51e3cbe218709f2db009a49ffef19470d22be53013c8371a381f2ae3cd39c8e757be83d4f
- SSDEEP 24576:YCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:D7uRfbQswUZcSByYGv5u
- TLSH
  T131759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  XWorm V6.0/Plugins/Ransomware.dll
- Size 1.6MB
- SHA256 64cbbbf90fe84eda1a8c2f41a4d37b1d60610e7136a02472a72c28b6acadc2fc
- MD5 c1dac1c03efe11a63fb986343e2707a5
- SHA1 f779aef8c46bccdb593ba1567b57aa1fdd30f202
- SHA512 8fc5bd687ff5bd51d048f4450363f8c45ee015b7889071c28d681fd67a58cd1b65c0afe02afb60c2fae6d9ee158cd9a71790f247e4096335fc833583c238f6f8
- SSDEEP 24576:dCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:k7uRfbQswUZcSByYGv5u
- TLSH
  T1E0759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  XWorm V6.0/Plugins/Recovery.dll
- Size 2.9MB
- SHA256 615f22a3851c0d4b8f0fcd905398ff89b482e52efc6c51e0455688ed5bbbab34
- MD5 6b413da4300296c3b0168bb88f6db661
- SHA1 3180c77841f9ab9ceb6e059a06338a4ad0dcc8e2
- SHA512 b1128ada4eb703c697bfaf7fb6a9962505ae2d61ae33dae739461a8ae1bc9252dd1063f7a3b31a18bf0845633be757db095a69e017ec2ec37dec50d3c762abab
- SSDEEP 49152:ZLe17uRfbQswUZcSByYGv5uq48vmy7cBLjchSO:w17ul5+
- TLSH
  T109E5AD117BD8C26BE0BE82B5A4B245199BB1F8456735CBCF66C0566E1E237C02E39337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  XWorm V6.0/Plugins/Regedit.dll
- Size 1.6MB
- SHA256 d20a4862029cffc324488be99924fba6c916710bd9f4b4468533f45d8410b701
- MD5 71ed5e9271077a6a8c7b3d96fecdccee
- SHA1 5665a6086b920272cdcc37b9e09d6afd43c8e729
- SHA512 bb2226aef1335d3a85101fe764fa15089a20fc0e9f23011364182a3b21610d27929960ecd903958e703b7da51c9f4f11cb55fa4009fc01b97a3a02adc0f98760
- SSDEEP 24576:ACs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:77uRfbQswUZcSByYGv5u
- TLSH
  T1D0759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  XWorm V6.0/Plugins/RemoteDesktop.dll
- Size 1.6MB
- SHA256 725972dcea27688f90f5a82ea2a20da7e12362a87b45fbadf3edae7c3ad005c6
- MD5 c2748822421c95ce8e7aaa4069cf2a0b
- SHA1 3f12aeac25f345f3b65cedf5a1bd40bfaeec2ca7
- SHA512 c6470f46d2ff39f01fdf9455d028177dceda3b4f818e72222eea8dd64dcf0cacd61db00a2d288f8de74633da639f53147b89ef997f17ae4d1985cc64b6836939
- SSDEEP 24576:xCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:Y7uRfbQswUZcSByYGv5u
- TLSH
  T117759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  XWorm V6.0/Plugins/ReverseProxy.dll
- Size 1.6MB
- SHA256 64137b46ebc02e907353d394029a0ce2365c6202392ab4bf6e6274e633aff31f
- MD5 13861fe3b9f0691618cf12163f80dabc
- SHA1 f944ea3f83b7027d56d6e3b0a073e4a94ea0ab6e
- SHA512 a22af148cf702556b1d33f56b82f3480070fe5b657b0181c0b9ed78350daec880ea9df1075bd8c7cdc7147bbcb2ded8f33bf38492c3f477d41f3222b0c7ba12d
- SSDEEP 24576:ECs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:/7uRfbQswUZcSByYGv5u
- TLSH
  T1E5759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  XWorm V6.0/Plugins/RunPE.dll
- Size 1.5MB
- SHA256 c081c8ad969f547ecde90e67f3d92e6e16da585c044dc81a54c47fdb643c2e01
- MD5 e9c4b8bee8779787caed03f0aa5ba9f9
- SHA1 3202671a8da094b0be188ccac2dd4c119cb2beeb
- SHA512 40eceb74e1e889e5818f86b2771b74e087396c618241349fa6bcb08e10f1dfba5399f9cd72facadafd07532014f1d8f40e7c7c1dd856638e8e1c982d6a3b310d
- SSDEEP 24576:/Cs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlfx:K7uRfbQswUZcSByYGv5uL
- TLSH
  T180759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  XWorm V6.0/Plugins/ServiceManager.dll
- Size 1.6MB
- SHA256 c6b60477696aa9e3d01bd19ffe3bbe673135b75d56d9813746314091a196dee2
- MD5 ad46bff37c9b7d89eeeb89332aaf410b
- SHA1 6d0fd1cdbc3b7485044d08dbebfc78185f6b0877
- SHA512 1d953c4748170f785c895cec62e2e9371b81db281bdb4d1031438fc98fe3151be27dde806441fa80b7660f75e8e5cd583a3a40950c4d1f7ea8870bf762293ceb
- SSDEEP 24576:JCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf4:A7uRfbQswUZcSByYGv5u
- TLSH
  T108759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  XWorm V6.0/Plugins/Shell.dll
- Size 1.6MB
- SHA256 36b119e5e622d60ab96fed0bc524b34e9e3c9c4a3a15cfc79df259b4b2a15c62
- MD5 3c6e4bcd216e43be0ea3b7658a73b912
- SHA1 e74ae8186b37c13775a23c73c6d0cc6e97285810
- SHA512 1f968b7f944f95664acee13502144567d0b343d2bb66f4c0868f1679c718dd73d79dcb89794e67ef005985908cc75a9aef10c167070e8ef2ce950b32f427d6dd
- SSDEEP 24576:NVCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlf:Ns7uRfbQswUZcSByYGv5u
- TLSH
  T191759F62B69AC1BAD4EE80B9897B961EF7B6784407348BD712D4172E1F337E01E39311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  XWorm V6.0/Plugins/StartupManager.dll
- Size 1.8MB
- SHA256 3cbbd4f935e400fa512e2ccddb99c55d50b04ac3a030c5e5e1d583dc7f0b98d3
- MD5 ec5ca764dd85c64165d08a13c0fb1ec4
- SHA1 5f0012ff4ea3e3fcde608642631830b036e00c5a
- SHA512 85b1f86f3b5f209106e2e0b282b1cb74c3834203d747391c7837f868c2b0a9f80f66df231d80d8841ab611ebcf36869fa6e18c7e13d9239484d75c05f08bbee1
- SSDEEP 24576:FCs4uvW4jfb2K90oo+C8JwUZc0PY0yNuVC9Hbv50eFGPlfDp6X3Re:87uRfbQswUZcSByYGv5uZExe
- TLSH
  T1C885AF22B6D9C1BAD4EE81B9887A961AF7B674440734CBDB22D4176E1F337D01E39312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  XWorm V6.0/Plugins/Stealer.dll
- Size 6.0MB
- SHA256 dac881acf0bf22a933e628b3d1724e40d6eb26e575eaeaba6cf195dab1d5585e
- MD5 a96df5083e0f1a75b274d05460d274cb
- SHA1 c7fc0eefaecf0aad40b3fe43b013566b11d57938
- SHA512 8892b394df7dffd4f485a6cfad292741ce4e0aadc5193f68e0bf18f95e09f5eaac30abc7feec6f29bcd839a21519beb8911918fff9dc291b67f0556415468249
- SSDEEP 49152:R1b9RVSf+nCGWMqkAf/7uRfbQswUZcSByYGv5uH7FFHxUZ2MZsibvK8UzbP/c+3J:R14kg/7ul59J89siII2
- TLSH
  T14C56AD0477E99E27E0AEE37684B04526ABF0F419B322D7DB658067AE1C137C05D2637B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32