Overview
overview
10Static
static
10xworm-3.1 ...de.rar
windows11-ltsc_2024-x64
1xworm-3.1 ...ACT.js
windows11-ltsc_2024-x64
3xworm-3.1 ...out.js
windows11-ltsc_2024-x64
3xworm-3.1 ...der.js
windows11-ltsc_2024-x64
3xworm-3.1 ...nts.js
windows11-ltsc_2024-x64
3xworm-3.1 ...der.js
windows11-ltsc_2024-x64
3xworm-3.1 ...hat.js
windows11-ltsc_2024-x64
3xworm-3.1 ...ort.js
windows11-ltsc_2024-x64
3xworm-3.1 ...ar.vbs
windows11-ltsc_2024-x64
5xworm-3.1 ...ss1.js
windows11-ltsc_2024-x64
3xworm-3.1 ...ss8.js
windows11-ltsc_2024-x64
3xworm-3.1 ...ent.js
windows11-ltsc_2024-x64
3xworm-3.1 ...ard.js
windows11-ltsc_2024-x64
3xworm-3.1 ...per.js
windows11-ltsc_2024-x64
3xworm-3.1 ...ack.js
windows11-ltsc_2024-x64
3xworm-3.1 ...der.js
windows11-ltsc_2024-x64
3xworm-3.1 .../FM.js
windows11-ltsc_2024-x64
3xworm-3.1 ...her.js
windows11-ltsc_2024-x64
3xworm-3.1 ...rm2.js
windows11-ltsc_2024-x64
3xworm-3.1 ...Ftp.js
windows11-ltsc_2024-x64
3xworm-3.1 ...Fun.js
windows11-ltsc_2024-x64
3xworm-3.1 ...ss0.js
windows11-ltsc_2024-x64
3xworm-3.1 ...ss1.js
windows11-ltsc_2024-x64
3xworm-3.1 ...oIP.js
windows11-ltsc_2024-x64
3xworm-3.1 ...ger.js
windows11-ltsc_2024-x64
3xworm-3.1 ...MIC.js
windows11-ltsc_2024-x64
3xworm-3.1 ...ct.vbs
windows11-ltsc_2024-x64
5xworm-3.1 ...nce.js
windows11-ltsc_2024-x64
3xworm-3.1 ...ssV.js
windows11-ltsc_2024-x64
3xworm-3.1 ...ams.js
windows11-ltsc_2024-x64
3xworm-3.1 ...oxy.js
windows11-ltsc_2024-x64
3xworm-3.1 ...are.js
windows11-ltsc_2024-x64
3General
- Target xworm-3.1 -No Rce Source Code.rar
- Size 34.8MB
- Sample260904-pdvgysaj2s
- SHA256 8dfae3fe62b56668945ad31cc723add88b9420917a7661e63cd84aeb807a6af0
- MD5 4aeb360e2b1357bf19f9676927901d2b
- SHA1 d6c097de877bc88a40a095f9fca9a6da1e122bed
- SHA512 4d1da02d223ad58ff1e6d45acbd04543f317f72093d08bcea77439792de1d126c891efe2d405585cdb312f132944e319b0c18b94b2f06a856096ebfacec9301c
- SSDEEP 786432:mVuH43hZsmF+G3ELamVV8fqJklIKKBfUTbBBeZUTsxab6M/Tm3:2uY3hZX4G3ELamV3GxEUTbfeZUAx6v/I
- TLSH T1EF873363F8D4F5DE1F6D99FDC3469048C9400F099499882AD774C3B67ACDEC193BA28A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
xworm-3.1 -No Rce Source Code.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral2
Sample
xworm-3.1 -No Rce Source Code/XWorm/ACT.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
xworm-3.1 -No Rce Source Code/XWorm/About.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
xworm-3.1 -No Rce Source Code/XWorm/Binder.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
xworm-3.1 -No Rce Source Code/XWorm/BlockClients.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
xworm-3.1 -No Rce Source Code/XWorm/Builder.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
xworm-3.1 -No Rce Source Code/XWorm/Chat.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral8
Sample
xworm-3.1 -No Rce Source Code/XWorm/CheckPort.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
xworm-3.1 -No Rce Source Code/XWorm/CircularProgressBar.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
xworm-3.1 -No Rce Source Code/XWorm/Class1.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
xworm-3.1 -No Rce Source Code/XWorm/Class8.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
xworm-3.1 -No Rce Source Code/XWorm/Client.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
xworm-3.1 -No Rce Source Code/XWorm/Clipboard.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral14
Sample
xworm-3.1 -No Rce Source Code/XWorm/Clipper.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
xworm-3.1 -No Rce Source Code/XWorm/DDosAttack.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral16
Sample
xworm-3.1 -No Rce Source Code/XWorm/Downloader.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
xworm-3.1 -No Rce Source Code/XWorm/FM.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
xworm-3.1 -No Rce Source Code/XWorm/FileSeacher.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
xworm-3.1 -No Rce Source Code/XWorm/Form2.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral20
Sample
xworm-3.1 -No Rce Source Code/XWorm/Ftp.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
xworm-3.1 -No Rce Source Code/XWorm/Fun.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral22
Sample
xworm-3.1 -No Rce Source Code/XWorm/GClass0.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
xworm-3.1 -No Rce Source Code/XWorm/GClass1.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral24
Sample
xworm-3.1 -No Rce Source Code/XWorm/GeoIP.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
xworm-3.1 -No Rce Source Code/XWorm/IconChanger.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral26
Sample
xworm-3.1 -No Rce Source Code/XWorm/MIC.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
xworm-3.1 -No Rce Source Code/XWorm/My/MyProject.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral28
Sample
xworm-3.1 -No Rce Source Code/XWorm/Performance.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
xworm-3.1 -No Rce Source Code/XWorm/ProcessV.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral30
Sample
xworm-3.1 -No Rce Source Code/XWorm/Programs.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
xworm-3.1 -No Rce Source Code/XWorm/Proxy.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral32
Sample
xworm-3.1 -No Rce Source Code/XWorm/Ransomware.js
Resource
win11ltsc2024-20260709-en
Malware Config
Extracted
-
gozi
Targets
-
- Target xworm-3.1 -No Rce Source Code.rar
- Size 34.8MB
- SHA256 8dfae3fe62b56668945ad31cc723add88b9420917a7661e63cd84aeb807a6af0
- MD5 4aeb360e2b1357bf19f9676927901d2b
- SHA1 d6c097de877bc88a40a095f9fca9a6da1e122bed
- SHA512 4d1da02d223ad58ff1e6d45acbd04543f317f72093d08bcea77439792de1d126c891efe2d405585cdb312f132944e319b0c18b94b2f06a856096ebfacec9301c
- SSDEEP 786432:mVuH43hZsmF+G3ELamVV8fqJklIKKBfUTbBBeZUTsxab6M/Tm3:2uY3hZX4G3ELamV3GxEUTbfeZUAx6v/I
- TLSH T1EF873363F8D4F5DE1F6D99FDC3469048C9400F099499882AD774C3B67ACDEC193BA28A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/ACT.cs
- Size 14KB
- SHA256 0005d68204a43001881094f57869aadf627d00fdcf3aad05dbf40053c99fff71
- MD5 9973c3c7ec6003621c4a43631c1263b7
- SHA1 7fa1be1f1e3034bdc42c9b6e981df483dacdb1df
- SHA512 fe7c524b32fd157c00182f1b8b7daadf6e85019dc2a1074d5da68237adced4fd4845fdf07f1b5f3cd5b8f495d4d2dd7239ba9b2f43d697d530891da3e7cc2dfc
- SSDEEP 192:9pYogW72eoqL8ZyUKIfg8nVsehBDrXwP5dRwaGW1qOKgaXwS1nEMaY7mxCaRdMGK:9pYgKKIvsfRnIOKe8AAcajBr
- TLSH T1F652415A77CE0E89F67222EAB270A904CAAFF41E81DC08EF390E0DD4D9455458BF9375
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/About.cs
- Size 10KB
- SHA256 57b67df6915a1d13f53ee2b36eb1deafe55df7784b035a47a3e14d0beba6d713
- MD5 67a23d392817f31dbf03e8f79c40c56b
- SHA1 c7c2c41bd6a3ec2ef7be029edae2f228993e4a45
- SHA512 d21b2e177a236a0b6e6abb41b1e3bea0731fb09d709735a1bfe4baf99de76504e458befa157e0c6e9762e63a444e8bcb2ed7f5b9fba0fa2534a83ad821f989c5
- SSDEEP 96:Jo4DOz0bD04sXsPcBgXNBwcXKqWX/jHXe5XXig/n7fwr/Yb3v/hVsLW6S+HBgHh8:9YPicowrQ/J+uRGJa1uDWRpKao1YpvKZ
- TLSH T156220F7A33CD8E5AF53311A5A231AD00CABFF10DC6E9045F3A0F4DE5CA429985B6A179
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Binder.cs
- Size 42KB
- SHA256 a90e518daeb71987b22901199ea6215efe7133726a173bed52f767fd2f2a452e
- MD5 9674c0ee315215a58cf5ceaa532dce7b
- SHA1 decf24576ca9ea8150d86f2c7b160260d23f9942
- SHA512 7a63f402afa06a05f9ee1e3f0d3f8649a6db75003fa5e8e755f7cd867750b4fa87699995849a8d5b456542d303e83aa34117264c66cae3a5c62e74dae259f7e0
- SSDEEP 768:JptVH2O5Olqx3xU1MpTzV08ZsCe3PHUKZgcik7G6KH+b3pQV+0ZpFs1FaYi:XxU1aR08SC67KMQs0si
- TLSH T11213625533CF4E8EFA862285A2B0AD14CA7FF46F82AC44EF754A0DC4D456108A7F93B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/BlockClients.cs
- Size 10KB
- SHA256 78b7ed10bbc340082a06eb914b357df3816e014cddb5f168561a2337a660ac96
- MD5 6976d206a5d9dc19e285a1d9892c6a32
- SHA1 479c4ee507bd099149c15ca563edfebe415b2e07
- SHA512 990b1c59a68723957648752a08c4d19d8f7724ddf9cfa8d39a7569dd06c5d0e8ec069a92f51ee227fddd8032a36f8a1b8b7189e7e96ddef6065ecdb900de635a
- SSDEEP 192:9pYVMNTIfiaiFWgaFdmrasqU8arJm2maKAAjtzUbxArbjGDmBT:9pYs14Mfi2qUw
- TLSH T1CA22202D33DD8A4EEA3223966AB0A418DA7FF02D81F900EF744E09D4DA1354587BB775
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Builder.cs
- Size 63KB
- SHA256 adb0ec3a3b4165132976203d9f4f936af7bda49478bf6e81856012f2a30ae1a1
- MD5 2d26264adabfc9821ce137a6e41cfac7
- SHA1 65a92d1b321cbd05980c6f2a828185f5f835ee5a
- SHA512 985b2b55d0c0cb5b55a5bdd843fb4b0c7323846f7a593a680272330b47a7f9e34ba2ff3354a9ce8c6a6df7186c19d3ae15c4263eecbd92a896402373966daa63
- SSDEEP 1536:ST6yt7OR09A9UlnkequHajj7VEh+9sm3vh08gP:qyOAhDgP
- TLSH T1C753712633CF8D5EBA59118954309C14CB7FF5BE929948EF798F09C0C81A48C937A27E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Chat.cs
- Size 6KB
- SHA256 2e273a8db4c939b2a001e972709276ebacb7b2fbaf460c1d8d52fe17f736f031
- MD5 2f4887bd87d25d593977cc073421a772
- SHA1 6bd31cff96698d5b952f3896ea771e2510e46ebe
- SHA512 a7ac89a793ab548ad8a60cd9497b81d80de882434c8848da229e9aebe639cf69a984ab09b134fbd63fe8769f309118c815aa9b4397e5879b29add9238633e433
- SSDEEP 192:9YVoLoZu2maBKhrQPLaHHY9rDh6ymEyEuLQDoYuFWdL/xmO:9YtmUx6yeE9CFS
- TLSH T108D134AE37CE8A6DE6732089B530E540C9BFF11E81DA08FF384B4DD0D65A5090779A35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/CheckPort.cs
- Size 10KB
- SHA256 2cc7ab7321708aab2fb9708baa46da2755f1511824e54b3f13723843355fd797
- MD5 de56f71d9136361bb8542bd01347c4e7
- SHA1 855fcd910433b22f3003f415084702cdeb3fe000
- SHA512 738b2c1df6c0a14b8dc510ed9de646da70d83073c2dfe3800494365edaa52830d0dc81d50914633ed51db033e0ab2d409033910b579eb5ccc01c65b0ffa03c58
- SSDEEP 192:9fI9To2SXqdI7aLuS5uENoPj0EGSK7wR+tfbU+QZbg5ZGD3GQ4gP8J44KxwoX:9fIJYir3a7GP/m
- TLSH T1A422EFA5338E4B6AD2731249D030B505CEFFFB3E81D819AFBA8F09D0E1639690369575
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/CircularProgressBar.cs
- Size 12KB
- SHA256 0f78046f1460ff0eab934238d23dddcd7f77887816b1dcb0886cd01429b67f70
- MD5 4c7b59c159626af1f4fc1998d7a1f787
- SHA1 58dcfdd37caf4dc4906600dd2839205c7b0dcd73
- SHA512 3ec92788ab77cd639d18eff5445b045897c0ab05e4470a1a710a018b9216fef3115787c5e40acc7dddf1006c3924ccbadada7534434fa800c9c865cb6ce1bf59
- SSDEEP 192:9fiIrkvE4q6JSBJTy6lJxUJF7UJsaJZiqJmytMF7JgixY4o5oH7Y68TUtKI3JMDz:9fiIrGV6BIAJJBt2Vus3JMSYP
- TLSH T1E9425389338E564E6A6321597934A801CBFFF937418E85EF785B0CE0E6649018D3FA76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target xworm-3.1 -No Rce Source Code/XWorm/Class1.cs
- Size 31KB
- SHA256 9c4533a2368e3ab75a03113e56b5e87611b100f190b572273059d3cf82bb2090
- MD5 b58fe0b944c545fe22151d6ed50b6709
- SHA1 bbb2c55effad7f36969fbddf2892d4a769f7525b
- SHA512 c37ba83268ca7db5325cf19f6d501e6b3fb4b57d305cb64efab66886426c4d5038ee22a7d3389618c7f2c89d27d6af168f587d341f753bba002b508e3985bac3
- SSDEEP 768:FK85EWT3xhHdgylCALPRCmWk3RYcJJQ15MMNJkIlOYsT06Z5BhL:FK85jdgylCANCx15MMNJkIlOYKBhL
- TLSH T1BDE23400374DC65E96AB3131A4B8BB13EADFF63582FD71B679760D00D4960458BBE28E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Class8.cs
- Size 2KB
- SHA256 b01358f9c025926ab868c0a99a7a645a95e2b705370e7b253fa35c1b00056466
- MD5 4a42817a31fd56a10d46cb50e3b5998d
- SHA1 2b78bb5c685fdd82115d8e7bd7cd4ef8ada725f3
- SHA512 78ae860372005eb0cf4834d64581f5d97049bb86a19b89b117eb959cccf408400e46a66f8c73f404a0b3b99ebaa3dbe6d28f5031b20bcf3486cdbbd88170e87e
- TLSH T1755149C13BCE8ADDD973245DA030F604CDAFF629819E0EABB5CBC950C07540567A927E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Client.cs
- Size 6KB
- SHA256 46ec646c7ed435dff40335b23a1f1402ba1489127cfa315b3a9fbad812a3175c
- MD5 d2729ede1838ed3e02bbc061b21fa344
- SHA1 72a99bd93d37fa7d85afce3a084f070c30f6f7a9
- SHA512 3bf090f5c0252811d99ed3673c74a1adcc0b3c9a2043f47a12b033251bd5d31940594a356851d4dc81c5ec1f27c6b20d2eb457174eb7ba97205d84d458e03d7b
- SSDEEP 192:ZzHTQ8RF6hmSd2pJh4qRy2511Nr1oCQBZH4aRI9pa:ZzzLla
- TLSH T1EFE168D033AE8A5DE693504D6430A184DA1EF93F825D5DEBB9CB69D0C8BD00487A87BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Clipboard.cs
- Size 10KB
- SHA256 4beb3328684e5ae0971f0ea798fe13c1bd41d3308252b6e95041f89b8d0b2f1b
- MD5 10007e3b3cb57b1e6a696ebdcec07c80
- SHA1 f61d927d8829f79d6b391046eac778d0a290103e
- SHA512 574742dc65fc3580114a01a76261e0fb45291fc9805cb2f8a9470c275fbafa3212d73399047a9d2774b1a7a2745225d7cf5f84fed178c5e24d0e1d6b9c39abd2
- SSDEEP 192:9YTbJuThB4vSqaSYfCMOaTjeyiakS6X4Ua9luDBxvaVKZvjOa2yO37oP03BurdRx:9Ymp5zJhAlD2gWAL
- TLSH T14932EDA533CE4A8EE5662395B6B0A911DAAFF00E83BC04EF344E8DC4D915148C6FE774
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Clipper.cs
- Size 8KB
- SHA256 5466c9bd3c94a833d7ad5e686e69af1850b35fe28e5f2633d80d0931921743f9
- MD5 0d3a5c050f0aa67b1cf3b9f7477321a9
- SHA1 6794a2a8ca7324d130d7f7eb8511fe8c8539310b
- SHA512 a919445142ca822c98e0025d7c5cedd102d6f89627510698125e459ade524dddfcd23d15f2c04486b0e60707800e28f1bd93676f3376eb7fa8afc9e7ec32f5f7
- SSDEEP 96:Jo4DOz0bDr/ZttYK7BcWovsGdDuxk1eSl5HhV3v1brUTHrJZjH0hrVtjrRO2HhnL:9YutlC2QZ6cWaTxu+ZE4CaVvTosEG
- TLSH T15B02222E33DE8E5AFB332259A131A804CBBFF54ED5D900AF790E59D0D6439490B6613A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/DDosAttack.cs
- Size 19KB
- SHA256 3ca1033d33f8323881b0206520725a3580ec6d0b95ff50c24778c1f1277a5b2c
- MD5 585563cc2fb47983ab0a4fa7e932695d
- SHA1 4b31f992f1341cea1889d0691ca68f9ec9605fbe
- SHA512 03e359186c59328fcbcddbb51cba3a5eb78ff2ed6506e11c1f49a095dfff83d523c5955fae423a86ba9041b516e07495f402d23b300a6da677b1cc147251d6d8
- SSDEEP 192:9KYpvXeZ203Ly9op5yjW57a8I4Js68aH1K2a2yHUtaAUhjX1IDDbYnXS4JUjfQqq:9KYc3Oy2i5dJs62q/hsoaN5
- TLSH T18292DC6A37CF4E69E55F2189E230AD00CEBFF11E81E904AF3A1F5DD5C9029858F69136
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Downloader.cs
- Size 10KB
- SHA256 a752aa3e487d6a5141314d5e8c06adf4e8856ad2f3d8f3739dd51e38fe96aab6
- MD5 bf0dbd75abaa616d9bf8a76f38a23b18
- SHA1 9c32af6767851fa246a6f997e118d527adcdd39f
- SHA512 c8313e489fb00e75f1c5cff28ecfd05d085517ab24f6ce5174be4e67a516fa013ea692dcd8aa6a94091d880053ca717d25930a826a45305248d01246115063a4
- SSDEEP 192:9f0gANsmASN+jDjSNZFm/TOaLpndtVc+ub782P:9fXfmAqI/Ts/P
- TLSH T10B220F3B37CF4E5EB81F2199A370AD40C9BFF10DC1E8449F3A2A5DD4E6425488B6A176
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/FM.cs
- Size 84KB
- SHA256 be936f07ba2812797288c0700028323659d9985ce4c394461d65e5f37c775a69
- MD5 0641aca836ea03c6cbe81f36fd569279
- SHA1 fb2e8a34804efa9c743c63303efbace388696ecd
- SHA512 1f42fa1185326b9948059a0b8d19fe76445bc28a50c32e8f2eda92ea31243421cb34a265b68cb5d6211b2114c54bd2878e32e4c41be968ce26b4245e74d675e4
- SSDEEP 1536:nyo+m6ZaZ9U8T/9ApjPJSbouHFoigEjNFlfjK1epqnc1IJyI+syfnH1V1yzl2lL/:nyTaVT/9ApjPJSboul1gEjNFlfjK1epD
- TLSH T10F8331A537CE4E8EE98623956AB06914D56FF42F82BC04EF344E0DD4E805584C7FABB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/FileSeacher.cs
- Size 15KB
- SHA256 c06e6cccae1c7146ede9e3abe7259b82332bc8e28d88afd54dc3e3a827ed8145
- MD5 6a7a079795456e2f0218ae7aab82a3df
- SHA1 0a286f3f2769be3ff4cd51d1d4c740078de87a28
- SHA512 709cb0f8858b7be149fa99ceb9b411b792d91eacc35108ef0834f8f16e361da39f5ac9bcc375a9454f3a98bc671916d7233da1d262e8e78dfad65ca18d3d220b
- SSDEEP 192:9pYljJJ/cLnaxGCY/R1VwJNs4NXaDvNh/yaCoZNahpvm5EOjr/Calv1NB9ayaFCe:9pYh8+5Y/CPs6WBbCm5JDnvt4Ke
- TLSH T19872126633DF4F4EF85B229AA270AD10C9BFF10E81EC00AF390E0DD4D9515859BBA675
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Form2.cs
- Size 37KB
- SHA256 67a57710e6a47c2aab7fa8788459f891dad6c116d7cc5e57610341a97c7dfdae
- MD5 fcf5b40f52a74c6cb7f5da3b4b81262d
- SHA1 2a480ef7a88e3fc650a75a99087f96092f7861e6
- SHA512 4b66345b445d2f2926c489317e253b33ccb0f01c4eac3a8367d7f3fec17126383be2ad9bfbc866ed56f12cdb9d9e40001ccaa1238aedb8159328e205b4bfe237
- SSDEEP 768:tKXcWxU6R0XraoC1j8SdIMCzQvvIavHYvISNInv9EvnM93vdPkLLad77nd:tKXc6UPF0Is/zlmkvdPkLLap7nd
- TLSH T1870331AA37CF8E49B95B2199A131AD00DEBFF01E82D814FF390B6DD0D4115484EBD676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Ftp.cs
- Size 10KB
- SHA256 cb1d0cc09e37ec6f779a32048c9f4cf6e9dd15542cc07e73a634840f3ca80773
- MD5 f3b1017b95571a671654b6160f2fdabb
- SHA1 d2567396582484a6b0492f035d0287e736d32b11
- SHA512 4e7770b363ab858b73e7b253dbb973b00ce212d99dd3fb2bd43a2defc9360fa312363338504b33cffc9fa24389d4c7e9e34914dfe2edbbd61b3f2587ffd5b663
- SSDEEP 192:9YnJTUfxM7jZO09alzL9hgiHuF4OQMOsObXb8:9YnCxMklh0
- TLSH T1D822002733DF8E0A75DB21A56171DC10CBBFF10EA1D804AF790BEED0D6069894B6A275
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Fun.cs
- Size 41KB
- SHA256 df347d531bbf04f48cb3f4761e1204f92dded879f5a3e0889e835c5a9a50916c
- MD5 18f23031d6c7f6864f771fc0b477a3dd
- SHA1 5d5c35a67b8302aa679aa514a462b86623375ab5
- SHA512 2db1bb088bbcd87cfd2b7f607afbf56b60732808f5d1024a3befc59e3bce424f4cc603e1a4ec0f004229bbc8654104dbc659683de3d95bcd1d51a7150508036c
- SSDEEP 768:guGSAQURpaIXQ0SiOAW22C20pSeUi09S3vymoT8b5zqw1m4bMoXrw4kpKoyn3:gSALRpaIXQ0SiOAH2C20pSeUi1Xloy3
- TLSH T1EF13F3A977CF4E09AA4731986231AC40CEBFF41FC1DA55EF390B9DD4D5826480BAD236
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/GClass0.cs
- Size 1KB
- SHA256 2840caf1aeed0576932bb0302b8a9149d09d01813013e4df9241423f7c8e5c1d
- MD5 d19a235bfc87d9d44b3f78ba830752ce
- SHA1 d04ddceba0d40b54c7604f356db39d9f56672ba7
- SHA512 46b05089611328703355a3235efd2eadfddb33e051c8941f3e98ca438ba5ea723620a37130cb52878c48c974763eb7769a1f304b2094e7b867e6908bf6eeaaa6
- TLSH T1B031ACD2338F569D69531142A438FA11CD9FF61842DE0DABFADD0E84C068C25476E37E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/GClass1.cs
- Size 3KB
- SHA256 3698f4c81dac7e96e3cd84ebba187439fb249a70bc89bd6711307c6730f6657e
- MD5 44c3107816580726dcf9f123e8dd48e5
- SHA1 090f48d995c8712e4935bbe06e53f5ed39b8a3ca
- SHA512 fbd0b31d100a2907d13645f3e9d3d631137c67139c5b96fbd67f601c2786fb9ada9fdf41b3729494a094bf55d8b793909fc7cdd33d52589bf8e494e919f560a2
- TLSH T11D71CDD0334EA2DE559331A6A434F614CA5FEA3481BE54F7F4DE4A44D0358029B3D6BD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/GeoIP.cs
- Size 15KB
- SHA256 1f5b905bdf0055ae3db8213d3e1ee061a4ac0da4a5f82ccf9aa12745f171071c
- MD5 a4783ead03097f040f99fe91f0a6718f
- SHA1 46f9a849de11453387d45bb91c7981c414a004e3
- SHA512 585c6bbe77a3137209fc92c8efe8a431a3a6ac3845863e276e4c1f81012e273bd1f9734c255358947a32b63047a2baad7df2053b84944c64ec035f31c695d9f0
- SSDEEP 192:9f581wEYJx8dXdXZX+1GC62ao1xTC5hQ2IYuENhAt+j1pEpAlkwyL8eOL43OHvu1:t8PYJx855NElxxENKtSjteZ3ONd+
- TLSH T151728457775F40EA7B765A1A92B1EE04D11EE45F42EC24EFB40F0E93A80443282767AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/IconChanger.cs
- Size 10KB
- SHA256 a17c869d72d27522a58da5fe1d075688518ca437b983c178c30040c15cfbaca2
- MD5 6637f60cd590a585731c4765658f0062
- SHA1 83e896fc177327b53ecb3a1bb82af8f9bad0deaf
- SHA512 39a3bdf1e3d6bf93d661740902a0e9eb3fbc4c3fb8c6077f814234daad2a05da308367c1c578e62cf36d92f7d1e145e5ac0f1401f6dc42488e199f7b1ebc83d4
- SSDEEP 192:9fWMkmq/DAq+8C7aFPNBLGWai984UOaIEFv1oCaolSqaWpHNBuotAY0e:9frkmq/DAq+8CGLglJLLVH
- TLSH T18332116A33CF4E486F5A21A9A231AC01DD7FF10EC1E814EF360B19D4E582958CF6E176
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/MIC.cs
- Size 9KB
- SHA256 2b7137db2a12dc9360c1547275f735ee9ff663e1a3828fd2e724f39409f268ca
- MD5 1134c76897f331e51de0264014165614
- SHA1 1b3102e9dfcdb66642aa91047ef6fe663d290b61
- SHA512 e888c515df97f9156237459365bd03768b000ec5397fb691316a8a69c4f26a5e2cf45fcfca4acc2d179382b1aae2f2db6c74784327cdd97d3c5a1c50a80cb08c
- SSDEEP 192:9Yf0RE485xYKdP8axa6kU4sabZvR5atxoILbx8TTKalOffAD2X/ZV5IU:9YtdE3VHNIBr
- TLSH T17712207A77CD4E69B9523389F330A941CEBFF30E82D804AF3A0A5CD0D561D4447AA676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/My/MyProject.cs
- Size 39KB
- SHA256 81f254c69ce41b41eabc400605c172c6b8423c17a24cb867de3371db5e93dfc6
- MD5 463e1ae7f4f8b30eed07293843882890
- SHA1 89a80eb7bcbe0f82b0cfe8a5303779756c46340a
- SHA512 c26d35b70f409fd1d917887e67e7484563feafd5dc4b708feb127afff97a980cfc79da9508db9a23be84866dc4a19053635477afd4fbf87fd3cdb80eaa4f888d
- SSDEEP 768:0lVZBCxywxtptMLVyjmmb4CMw2u6xfkYgwLUTOVURkaPem+CZUWurI8:2KyVjD
- TLSH T17603AA92738E56AEE56215593439BC08CBAFF13F02CC58EFB9871CD4D8231A34A1997D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target xworm-3.1 -No Rce Source Code/XWorm/Performance.cs
- Size 20KB
- SHA256 93e3a122182126215c2700bfc753ff24e2f65d1eb62a1135df89d601f69ef70f
- MD5 464966b74a905dce85a3373f090d6a0d
- SHA1 e00989e597dbfaf0f7a2846db091282a59db1168
- SHA512 261b7c45bd270323197f0ec3afeecdc35e53ef4cceda34bc469deeb18dfc9b8d9760a192ed75125d7e36d89678e64d669e8729da0a0d0fb227d516a9ee581226
- SSDEEP 192:9Yicx7w1CP6HhNYepWFOrRMO9N0N1aiCuiXajhiNCaIY1JV1NGIqY2XM+P/5nndw:9YiA7wsP6HhNYepWMMKNokVBAgJ8I
- TLSH T147921E2A73EE4E95795323E5A2719100CABFF50EC1DC846F3A0E4DE0D582DC8AB76176
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/ProcessV.cs
- Size 17KB
- SHA256 e9bc8f6595b235059ab804a44b644ff84302b2f83520bafaf78df345292761a4
- MD5 a7db62910a587e1a6711d1eaa76ad7b8
- SHA1 ae6f73ae0aee58e5184d2412e5326a6463d0f0c5
- SHA512 839b8c7cd9b4fdadeb29ea4e5ed3753028abf4caa0aee0807b1c7b99619ff9a883f029e1b59abf192b472d41f160e805c84655e47b4d1eeb431f60aaa393a4da
- SSDEEP 192:9pYg9ZTBq9/YLN02csRwaCQsra1VuTEOhBccXSXzra9J4xBBasOQ5g/dd2Y9plpv:9pY2Qoh0bTE1XzRnALtufkN
- TLSH T16E821315B3CE4F4DB98333D6B2B0A514CAAFF40E81EC04AF3D0E4DD4D9519C69AAA275
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Programs.cs
- Size 14KB
- SHA256 d305b639a06e9a914c4a5ded193a9d5577ed1efe7609db2cc789330271852a41
- MD5 efd9bff77a518821f6991646efed027c
- SHA1 eba1461e199832789308a7edf32bff906b072525
- SHA512 ce63f927f8b5c557023f3fafab9d83670eb90b96e35b6a1f94d0426874962831cdb5a179e980a8e473950e8b26a28a5023ce2adff9289f64560c664a75b0e887
- SSDEEP 192:9pY0mJfGP9rch8PLqahBAQXSA+3GaaYbgaZZ1IRTYaOeGY+FaNR5HwoJ9bRUpBqD:9pYSPqhAO1DETuY+4YMUH6
- TLSH T1F1620125B3CE4E4DB59323C5A6B0A610CABFF40F82F904DF3A0D4CD5D951A858AFA674
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Proxy.cs
- Size 15KB
- SHA256 d6b7847f4ba93c6d785c964c5150581f8b85878943f32f48d35a761018d81a2a
- MD5 f5f0b5c5eb85e39418301ebe725f5af8
- SHA1 fb3a402e77cb8c4898a3696f4fdf9e72647563cb
- SHA512 977465a91ba9cb316e5dd147e40b4654e25b37d61f148f3bb179401ee60032ed305f20b826f9070c15f4f3c3fc196a103c56f1c8847e4857428a45bcab3a2fbe
- SSDEEP 192:9KYpa3mir/SD2qbUmZeuaXH0VNayaNIz3KRe9Z44wboA9c3p3zBjjJ+QQOa:9KYpGvr/SD2YZeq63Q1a
- TLSH T1C672102637CD8E5935533389BA71A510CABFF51DC3E8086F3A0E4DD0C942E995BA923D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target xworm-3.1 -No Rce Source Code/XWorm/Ransomware.cs
- Size 12KB
- SHA256 ddc893d30d8346b1c61fc277015bb4591f7b182f6acab690ad3bc7e429c83426
- MD5 45344592eaf9ea9119bee7b802ac39bc
- SHA1 3e778c2549600c8b01f480cb2ecbd2c2a269ae87
- SHA512 e58f85e27102b9e36bb75b46a1a40926c0e10e23f3dc8f449c0d9179fb51c955c2cadb91be055519b237fa75c531e4fc9d14eb5c79f86c885b868d012f0ca529
- SSDEEP 192:9pYhBLkbOY8+2njRDBDaV0PacoTVyQU/NzdVaQTQ5jBw42:9pY7y78zZdf/
- TLSH T16D42223A33CE4F4979533389B670A500C9BFF42D82E8049F3A4E49D0D651DB89B6D679
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10