General
- Target XWorm V6.5.exe
- Size 9.4MB
- Sample260819-styq4axcja
- SHA256 d9830213d3d73a30020a30bbc409efc55992cd8618ed305e87f0bc3e2a10a7f2
- MD5 1b5ad07f1e0bce828f0c56e7eaef3abb
- SHA1 e8606e982f29fda8bb1c028997060f7060b50ef7
- SHA512 691ff48c737cb6ba4f1c59025753f1aae88f9e4c8153749810cd4da3062f41a7fff003625fc910825cb0c9fc99b793c5b5eeb5ce6c950b035c217187572634df
- SSDEEP 98304:1s/h5FMqYD3f3UIC/Zo1pwIuWTYLP9Pk6gAK6n4ldyNh:1s5sJ3Uxo1yIEL1kehn4i
- TLSH T1B3A64A12B381C902C8B819B044164FE465B47E8D5F68E9A9B8C8773C67FA1CDB157BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XWorm V6.5.exe
Resource
win10v2004-20260513-en
6 signatures
900 seconds
Behavioral task
behavioral2
Sample
XWorm V6.5.exe
Resource
win11ltsc2024-20260710-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target XWorm V6.5.exe
- Size 9.4MB
- SHA256 d9830213d3d73a30020a30bbc409efc55992cd8618ed305e87f0bc3e2a10a7f2
- MD5 1b5ad07f1e0bce828f0c56e7eaef3abb
- SHA1 e8606e982f29fda8bb1c028997060f7060b50ef7
- SHA512 691ff48c737cb6ba4f1c59025753f1aae88f9e4c8153749810cd4da3062f41a7fff003625fc910825cb0c9fc99b793c5b5eeb5ce6c950b035c217187572634df
- SSDEEP 98304:1s/h5FMqYD3f3UIC/Zo1pwIuWTYLP9Pk6gAK6n4ldyNh:1s5sJ3Uxo1yIEL1kehn4i
- TLSH T1B3A64A12B381C902C8B819B044164FE465B47E8D5F68E9A9B8C8773C67FA1CDB157BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.