General

  • Target
    xworm-3.1 -No Rce Source Code.rar
  • Size 34.8MB
  • Sample260904-pdvgysaj2s
  • SHA256 8dfae3fe62b56668945ad31cc723add88b9420917a7661e63cd84aeb807a6af0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • gozi

Targets

    • Target
      xworm-3.1 -No Rce Source Code.rar
    • Size 34.8MB
    • SHA256 8dfae3fe62b56668945ad31cc723add88b9420917a7661e63cd84aeb807a6af0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/ACT.cs
    • Size 14KB
    • SHA256 0005d68204a43001881094f57869aadf627d00fdcf3aad05dbf40053c99fff71
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/About.cs
    • Size 10KB
    • SHA256 57b67df6915a1d13f53ee2b36eb1deafe55df7784b035a47a3e14d0beba6d713
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Binder.cs
    • Size 42KB
    • SHA256 a90e518daeb71987b22901199ea6215efe7133726a173bed52f767fd2f2a452e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/BlockClients.cs
    • Size 10KB
    • SHA256 78b7ed10bbc340082a06eb914b357df3816e014cddb5f168561a2337a660ac96
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Builder.cs
    • Size 63KB
    • SHA256 adb0ec3a3b4165132976203d9f4f936af7bda49478bf6e81856012f2a30ae1a1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Chat.cs
    • Size 6KB
    • SHA256 2e273a8db4c939b2a001e972709276ebacb7b2fbaf460c1d8d52fe17f736f031
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/CheckPort.cs
    • Size 10KB
    • SHA256 2cc7ab7321708aab2fb9708baa46da2755f1511824e54b3f13723843355fd797
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/CircularProgressBar.cs
    • Size 12KB
    • SHA256 0f78046f1460ff0eab934238d23dddcd7f77887816b1dcb0886cd01429b67f70
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • Executes a VBScript file via the Windows Script Host.

    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Class1.cs
    • Size 31KB
    • SHA256 9c4533a2368e3ab75a03113e56b5e87611b100f190b572273059d3cf82bb2090
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Class8.cs
    • Size 2KB
    • SHA256 b01358f9c025926ab868c0a99a7a645a95e2b705370e7b253fa35c1b00056466
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Client.cs
    • Size 6KB
    • SHA256 46ec646c7ed435dff40335b23a1f1402ba1489127cfa315b3a9fbad812a3175c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Clipboard.cs
    • Size 10KB
    • SHA256 4beb3328684e5ae0971f0ea798fe13c1bd41d3308252b6e95041f89b8d0b2f1b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Clipper.cs
    • Size 8KB
    • SHA256 5466c9bd3c94a833d7ad5e686e69af1850b35fe28e5f2633d80d0931921743f9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/DDosAttack.cs
    • Size 19KB
    • SHA256 3ca1033d33f8323881b0206520725a3580ec6d0b95ff50c24778c1f1277a5b2c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Downloader.cs
    • Size 10KB
    • SHA256 a752aa3e487d6a5141314d5e8c06adf4e8856ad2f3d8f3739dd51e38fe96aab6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/FM.cs
    • Size 84KB
    • SHA256 be936f07ba2812797288c0700028323659d9985ce4c394461d65e5f37c775a69
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/FileSeacher.cs
    • Size 15KB
    • SHA256 c06e6cccae1c7146ede9e3abe7259b82332bc8e28d88afd54dc3e3a827ed8145
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Form2.cs
    • Size 37KB
    • SHA256 67a57710e6a47c2aab7fa8788459f891dad6c116d7cc5e57610341a97c7dfdae
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Ftp.cs
    • Size 10KB
    • SHA256 cb1d0cc09e37ec6f779a32048c9f4cf6e9dd15542cc07e73a634840f3ca80773
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Fun.cs
    • Size 41KB
    • SHA256 df347d531bbf04f48cb3f4761e1204f92dded879f5a3e0889e835c5a9a50916c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/GClass0.cs
    • Size 1KB
    • SHA256 2840caf1aeed0576932bb0302b8a9149d09d01813013e4df9241423f7c8e5c1d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/GClass1.cs
    • Size 3KB
    • SHA256 3698f4c81dac7e96e3cd84ebba187439fb249a70bc89bd6711307c6730f6657e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/GeoIP.cs
    • Size 15KB
    • SHA256 1f5b905bdf0055ae3db8213d3e1ee061a4ac0da4a5f82ccf9aa12745f171071c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/IconChanger.cs
    • Size 10KB
    • SHA256 a17c869d72d27522a58da5fe1d075688518ca437b983c178c30040c15cfbaca2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/MIC.cs
    • Size 9KB
    • SHA256 2b7137db2a12dc9360c1547275f735ee9ff663e1a3828fd2e724f39409f268ca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/My/MyProject.cs
    • Size 39KB
    • SHA256 81f254c69ce41b41eabc400605c172c6b8423c17a24cb867de3371db5e93dfc6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • Executes a VBScript file via the Windows Script Host.

    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Performance.cs
    • Size 20KB
    • SHA256 93e3a122182126215c2700bfc753ff24e2f65d1eb62a1135df89d601f69ef70f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/ProcessV.cs
    • Size 17KB
    • SHA256 e9bc8f6595b235059ab804a44b644ff84302b2f83520bafaf78df345292761a4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Programs.cs
    • Size 14KB
    • SHA256 d305b639a06e9a914c4a5ded193a9d5577ed1efe7609db2cc789330271852a41
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Proxy.cs
    • Size 15KB
    • SHA256 d6b7847f4ba93c6d785c964c5150581f8b85878943f32f48d35a761018d81a2a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      xworm-3.1 -No Rce Source Code/XWorm/Ransomware.cs
    • Size 12KB
    • SHA256 ddc893d30d8346b1c61fc277015bb4591f7b182f6acab690ad3bc7e429c83426
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

isfbbankertrojangozi
Score
10/10

behavioral1

Score
1/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
5/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
5/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10