XWorm V3[.]0[.]exe

Resubmissions

20/08/2026, 09:33

260820-ljp8mshp2v

20/08/2026, 09:33

260820-ljerxawzfy10

20/08/2026, 09:31

260820-lhfykstejd10

Sharing

Copy URL Twitter E-mail

General

Target
XWorm V3.0.exe
Size 9.1MB
Sample260820-ljp8mshp2v
SHA256 238a729cac982f5479ea40bff699cb398dcb3662b86230aa7af4ad19240b419e
MD5 09d817d5e7a9c6fccfc539761b60f4f8
SHA1 6f73c1fefc2d197d1bb22985cfc288623b515351
SHA512 659081e763638880543705070d30a1054cb0fc52b3bcdca9d3e8a425907f4ef1063acd823be4bbe0c02f8b3deb1428f7ef9f20d9c057dd8880d8b7021a035976
SSDEEP 196608:jqP9vCFv9dDYnqHdLv0ABOq0o4uEC9IPq/KkfKf3g+5ffzeILYuI/yWiXuh:jqPMJ9ynqHhcAMuKkfw3gMzeJJ/cX
TLSH
T13AA6222B796A50A4D3F5A337C973D4B16A900D1832A279CDADC0FDFB3CA1A9C907905D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XWorm V3.0.exe

File Explorer

XWorm V3.0.exe

.exe 9.1MB

XWorm V3.0.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 238a729cac982f5479ea40bff699cb398dcb3662b86230aa7af4ad19240b419e
MD5 09d817d5e7a9c6fccfc539761b60f4f8
SHA1 6f73c1fefc2d197d1bb22985cfc288623b515351
SHA512 659081e763638880543705070d30a1054cb0fc52b3bcdca9d3e8a425907f4ef1063acd823be4bbe0c02f8b3deb1428f7ef9f20d9c057dd8880d8b7021a035976
SSDEEP 196608:jqP9vCFv9dDYnqHdLv0ABOq0o4uEC9IPq/KkfKf3g+5ffzeILYuI/yWiXuh:jqPMJ9ynqHhcAMuKkfw3gMzeJJ/cX
TLSH
T13AA6222B796A50A4D3F5A337C973D4B16A900D1832A279CDADC0FDFB3CA1A9C907905D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Password

1234

Minor OS version

Major OS version

Entry point

9445742

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

XWorm V3.0.exe

mscoree

dotnet