General

  • Target
    1e69f32026098478eb1f5f09b07ed3b75630f6289a213c7307784c5897207ae1.bin
  • Size 26.2MB
  • Sample260827-dtynrsxtfz
  • SHA256 1e69f32026098478eb1f5f09b07ed3b75630f6289a213c7307784c5897207ae1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • xworm

Version
  • 5.0

Mutex
  • 3jp8MC9dwVhrLba1

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

  • localhost

    127.0.0.1

aes.plain

Targets

    • Target
      XWorm V5.6/FastColoredTextBox.dll
    • Size 333KB
    • SHA256 3701b19ccdac79b880b197756a972027e2ac609ebed36753bd989367ea4ef519
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/Fixer.bat
    • Size 122B
    • SHA256 a11703fd47d16020fa099a95bb4e46247d32cf8821dc1826e77a971cdd3c4c55
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      XWorm V5.6/GMap.NET.Core.dll
    • Size 2.9MB
    • SHA256 58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/GMap.NET.WindowsForms.dll
    • Size 147KB
    • SHA256 741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/Guna.UI2.dll
    • Size 1.9MB
    • SHA256 c6264665a882e73eb2262a74fea2c29b1921a9af33180126325fb67a851310ef
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/IconExtractor.dll
    • Size 10KB
    • SHA256 440912d85d2f98bb4f508ab82847067c18e1e15be0d8ecdcff0cc19327527fc2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/NAudio.dll
    • Size 502KB
    • SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/Newtonsoft.Json.dll
    • Size 695KB
    • SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/Plugins/ActiveWindows.dll
    • Size 14KB
    • SHA256 567b9861026a0dbc5947e7515dc7ab3f496153f6b3db57c27238129ec207fc52
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/Plugins/Chat.dll
    • Size 18KB
    • SHA256 aab20f465955d77d6ec3b5c1c5f64402a925fb565dda5c8e38c296cb7406e492
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/Plugins/Chromium.dll
    • Size 32KB
    • SHA256 b6d8bccdf123ceac6b9642ad3500d4e0b3d30b9c9dd2d29499d38c02bd8f9982
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/Plugins/Clipboard.dll
    • Size 14KB
    • SHA256 e31a1c2b1baa2aa2c36cabe3da17cd767c8fec4c206bd506e889341e5e0fa959
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/Plugins/Cmstp-Bypass.dll
    • Size 11KB
    • SHA256 fa420fd3d1a5a2bb813ef8e6063480099f19091e8fa1b3389004c1ac559e806b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/Plugins/FileManager.dll
    • Size 679KB
    • SHA256 b58ed3ebbcd27c7f4b173819528ff4db562b90475a5e304521ed5c564d39fffd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/Plugins/FilesSearcher.dll
    • Size 478KB
    • SHA256 e66e1273dc59ee9e05ce3e02f1b760b18dd296a47d92b3ce5b24efb48e5fb21b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      XWorm V5.6/Plugins/HBrowser.dll
    • Size 25KB
    • SHA256 75e8ff57fa6d95cf4d8405bffebb2b9b1c55a0abba0fe345f55b8f0e88be6f3c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

stealerstormkittytrojanratxworm
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10