Overview

overview

9

Static

static

3

XWorm V3.1.exe

windows10-2004-x64

9

XWorm V3.1.exe

windows11-ltsc_2024-x64

9

Resubmissions

17/08/2026, 23:45

260817-3ryy7asvcv9

14/02/2026, 21:08

260214-zzbxvahs5d9

Sharing

Copy URL Twitter E-mail

General

  • Target
    XWorm V3.1.exe
  • Size 9.0MB
  • Sample260817-3ryy7asvcv
  • SHA256 e6fd79786f54db6c9ea19f754c0e456477eaa115292c7062b7f768932ec29fda
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
defense_evasiondiscovery

Malware Config

Targets

    • Target
      XWorm V3.1.exe
    • Size 9.0MB
    • SHA256 e6fd79786f54db6c9ea19f754c0e456477eaa115292c7062b7f768932ec29fda
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    defense_evasiondiscovery

    • Looks for VirtualBox Guest Additions in registry

      defense_evasion

    • Looks for VMWare Tools registry key

      defense_evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks