stormkitty | 119a275c4306862576ad85e2f5b399fd442a9e7cdbd2a94d2cb3981c8d10b461

Resubmissions

15/09/2026, 19:05

260915-xrj75szvgz10

15/09/2026, 18:47

15/09/2026, 18:40

15/09/2026, 18:31

15/09/2026, 18:23

Sharing

Copy URL Twitter E-mail

General

Target
XWorm V5.6.rar
Size 23.3MB
Sample260915-w1la5asblc
SHA256 119a275c4306862576ad85e2f5b399fd442a9e7cdbd2a94d2cb3981c8d10b461
MD5 3fe987b8045777ba3bd7773b10ba08e4
SHA1 6fe7a2edfa9dd735fe3a105a8d37d20ae37adc47
SHA512 8c9825913009f55bd0b8482f985343155e09a1c839dd53b8013a4ebb47ec4e87e13634e858684ad623e6e862623cee21ad6eb4d26edefa1c123e849f80ce1a58
SSDEEP 393216:Vya5lE857RkaVmfE857RjDa6rIw7t5xiL+pXiMmlFTBpS+xggsIqGfyPT2I4b4qy:Vya95nwr52wpiLqXiMS9pS4FsIqGeTtR
TLSH
T192373362468DF1FD52028108B9C737EB31C8AB45EEDB6738D1750F696DF60B60A52EE0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  XWorm V5.6.rar
- Size 23.3MB
- SHA256 119a275c4306862576ad85e2f5b399fd442a9e7cdbd2a94d2cb3981c8d10b461
- MD5 3fe987b8045777ba3bd7773b10ba08e4
- SHA1 6fe7a2edfa9dd735fe3a105a8d37d20ae37adc47
- SHA512 8c9825913009f55bd0b8482f985343155e09a1c839dd53b8013a4ebb47ec4e87e13634e858684ad623e6e862623cee21ad6eb4d26edefa1c123e849f80ce1a58
- SSDEEP 393216:Vya5lE857RkaVmfE857RjDa6rIw7t5xiL+pXiMmlFTBpS+xggsIqGfyPT2I4b4qy:Vya95nwr52wpiLqXiMS9pS4FsIqGeTtR
- TLSH
  T192373362468DF1FD52028108B9C737EB31C8AB45EEDB6738D1750F696DF60B60A52EE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Executes dropped EXE
behavioral1 behavioral2
- Target
  XWorm V5.6/XWorm V5.6/NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- TLSH
  T156B45C2237E4962BD1AF5775E4E1191B8BB1F8423237D78F8684BB6E1D837924C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  XWorm V5.6/XWorm V5.6/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  XWorm V5.6/XWorm V5.6/Plugins/ActiveWindows.dll
- Size 14KB
- SHA256 567b9861026a0dbc5947e7515dc7ab3f496153f6b3db57c27238129ec207fc52
- MD5 5a766a4991515011983ceddf7714b70b
- SHA1 4eb00ae7fe780fa4fe94cedbf6052983f5fd138b
- SHA512 4bd6b24e236387ff58631207ea42cd09293c3664468e72cd887de3b3b912d3795a22a98dcf4548fb339444337722a81f8877abb22177606d765d78e48ec01fd8
- SSDEEP 384:vRt5r7olU5QrGPbMrodT8ptsY7XZ1EDI6:vRtSRrGPb9t0Z1ED7
- TLSH
  T11F624968E3E44375C6FE1FB25C7363001370C6088C07FBAE1ADCA2569D5BA9D8B5176A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  XWorm V5.6/XWorm V5.6/Plugins/Chat.dll
- Size 18KB
- SHA256 aab20f465955d77d6ec3b5c1c5f64402a925fb565dda5c8e38c296cb7406e492
- MD5 59f75c7ffaccf9878a9d39e224a65adf
- SHA1 46b0f61a07e85e3b54b728d9d7142ddc73c9d74b
- SHA512 80056163b96ce7a8877874eaae559f75217c0a04b3e3d4c1283fe23badfc95fe4d587fd27127db4be459b8a3adf41900135ea12b0eeb4187adbcf796d9505cb8
- SSDEEP 384:4MOna4ifKQtuUvl0BY0iYUsBG/crwTKvh6GIKoIafWUWmfN:vKQtuq2Y0lUUG0r0pIafWXe
- TLSH
  T185821829939583B3C6FE2AF69D76E19043B1D211CA07FF6F6DDCA0AA4C933528341791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  XWorm V5.6/XWorm V5.6/Plugins/Chromium.dll
- Size 32KB
- SHA256 b6d8bccdf123ceac6b9642ad3500d4e0b3d30b9c9dd2d29499d38c02bd8f9982
- MD5 edb2f0d0eb08dcd78b3ddf87a847de01
- SHA1 cc23d101f917cad3664f8c1fa0788a89e03a669c
- SHA512 8f87da834649a21a908c95a9ea8e2d94726bd9f33d4b7786348f6371dfae983cc2b5b5d4f80a17a60ded17d4eb71771ec25a7c82e4f3a90273c46c8ee3b8f2c3
- SSDEEP 768:6SyQlmUmBlEu0FXfjq2sgDrLjfcVJ5sN9aWdMIxbKhJ+GEq3ZsL5f62:3yQltmBlmFXfjq2sgDrLjfcVJ5sNkQOa
- TLSH
  T1CAE2294873F8C614EEFE0D75983865600372A143AD57F7AD0AC1A0AA1BB3B958D61FD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  XWorm V5.6/XWorm V5.6/Plugins/Clipboard.dll
- Size 14KB
- SHA256 e31a1c2b1baa2aa2c36cabe3da17cd767c8fec4c206bd506e889341e5e0fa959
- MD5 831eb0de839fc13de0abab64fe1e06e7
- SHA1 53aad63a8b6fc9e35c814c55be9992abc92a1b54
- SHA512 2f61bcf972671d96e036b3c99546cd01e067bef15751a87c00ba6d656decb6b69a628415e5363e650b55610cf9f237585ada7ce51523e6efc0e27d7338966bee
- SSDEEP 192:xh23MTInqHX7qRlrZk1/X7eOFXgNTer149iY6IW1mX/YWMqS7RSLOIU:cTWElV0/X7eUSTe5Wi2X/ShIU
- TLSH
  T1A0524C5863E4823DC7FD0AB24C73B3801774D705ED82FB2E1DD860A25E97699874276B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  XWorm V5.6/XWorm V5.6/Plugins/Cmstp-Bypass.dll
- Size 11KB
- SHA256 fa420fd3d1a5a2bb813ef8e6063480099f19091e8fa1b3389004c1ac559e806b
- MD5 cf15259e22b58a0dfd1156ab71cbd690
- SHA1 3614f4e469d28d6e65471099e2d45c8e28a7a49e
- SHA512 7302a424ed62ec20be85282ff545a4ca9e1aecfe20c45630b294c1ae72732465d8298537ee923d9e288ae0c48328e52ad8a1a503e549f8f8737fabe2e6e9ad38
- SSDEEP 192:KpXpS1QWlPkiqdE7FNNGGO9mWbpGkjgyaYcIW1vr/8TNU7aL7YiLsO08hdW5:Kp5IfL0mWbEkUyaYir/oNJL7KQ
- TLSH
  T1EB32F62CA7E182B5C97E0E7248A7E3111770DA049D23FB2F55E4A10A5D7734883A7B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  XWorm V5.6/XWorm V5.6/Plugins/FileManager.dll
- Size 679KB
- SHA256 b58ed3ebbcd27c7f4b173819528ff4db562b90475a5e304521ed5c564d39fffd
- MD5 641a8b61cb468359b1346a0891d65b59
- SHA1 2cdc49bcd7428fe778a94cdcd19cabf5ece8c9c0
- SHA512 042702d34664ea6288e891c9f7aa10a5b4b07317f25f82d6c9fa9ba9b98645c14073d0f66637060b416a30c58dec907d9383530320a318523c51f19ebd0a4fee
- SSDEEP 12288:bVnchrRTHcQ3nrn6xtI9qR5WcygA5KeirCDD/:btJQ3nrnMI9MUlr5Kei+DD/
- TLSH
  T172E418203FE8E01FE4AE73B5D4E1972156B4E6427296FF8F258056E80E833886C555BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  XWorm V5.6/XWorm V5.6/Plugins/FilesSearcher.dll
- Size 478KB
- SHA256 e66e1273dc59ee9e05ce3e02f1b760b18dd296a47d92b3ce5b24efb48e5fb21b
- MD5 6f8f1621c16ac0976600146d2217e9d2
- SHA1 b6aa233b93aae0a17ee8787576bf0fbc05cedde4
- SHA512 eb55acdea8648c8cdefee892758d9585ff81502fc7037d5814e1bd01fee0431f4dde0a4b04ccb2b0917e1b11588f2dc9f0bfe750117137a01bbd0c508f43ef6a
- SSDEEP 6144:ZAHdfUpnnBuIbE7SCQeGtSV41QJDsTDDh0Yhe6dwxLV/Quhg08OwR75:yVUpnkZ7slS4Ys50ie6Cfzg0M
- TLSH
  T170A49E416BE8C657E1BF27B2C0E252A1CBB0E555A62EDFCF6D4025EE1C17340E9107AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  XWorm V5.6/XWorm V5.6/Plugins/HBrowser.dll
- Size 25KB
- SHA256 75e8ff57fa6d95cf4d8405bffebb2b9b1c55a0abba0fe345f55b8f0e88be6f3c
- MD5 f0e921f2f850b7ec094036d20ff9be9b
- SHA1 3b2d76d06470580858cc572257491e32d4b021c0
- SHA512 16028ae56cd1d78d5cb63c554155ae02804aac3f15c0d91a771b0dcd5c8df710f39481f6545ca6410b7cd9240ec77090f65e3379dcfe09f161a3dff6aec649f3
- SSDEEP 384:tp33X3L5/QrX8nB9d13+6HcLReMWaFnp9l/1DRVTbg0Ut4xh+TfYMoKAB1R:tR3nL5/QrQ13kRR9bTbz+DYMoFBf
- TLSH
  T1F6B25B4967F49630E1FD0A75987367148370F6935812EF8F0AC9641A2E3B7E846247EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  XWorm V5.6/XWorm V5.6/Plugins/HRDP.dll
- Size 333KB
- SHA256 3701b19ccdac79b880b197756a972027e2ac609ebed36753bd989367ea4ef519
- MD5 b746707265772b362c0ba18d8d630061
- SHA1 4b185e5f68c00bef441adb737d0955646d4e569a
- SHA512 fd67f6c55940509e8060da53693cb5fbac574eb1e79d5bd8f9bbd43edbd05f68d5f73994798a0eed676d3e583e1c6cde608b54c03604b3818520fa18ad19aec8
- SSDEEP 6144:4FErOIif3RzSHh+20lXs1TzCeBcQeDbNlz7:eEeR52bmeh0n
- TLSH
  T1D274292422F84665E27F47BCD4B5A000D3FAB53699DFDB4E8B64A0DA2F63340D526633
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  XWorm V5.6/XWorm V5.6/Plugins/HVNC.dll
- Size 2.9MB
- SHA256 58c755fcfc65cddea561023d736e8991f0ad69da5e1378dea59e98c5db901b86
- MD5 819352ea9e832d24fc4cebb2757a462b
- SHA1 aba7e1b29bdcd0c5a307087b55c2ec0c7ca81f11
- SHA512 6a5b0e1553616ea29ec72c12072ae05bdd709468a173e8adbdfe391b072c001ecacb3dd879845f8d599c6152eca2530cdaa2c069b1f94294f778158eaaebe45a
- SSDEEP 49152:ot12Gb/hz7ZsK9qY5uyUW57VC4IB1+fXhQ1hyCzMw/22fSg7gjxhUE/nbTC0xemh:oLbteKb57W1+PhQ1HM1gmJ/SZmh
- TLSH
  T152D5234D77FC068BF5BFDBBD7870069A8331F106AA37E30E15A154A91D23B818851BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  XWorm V5.6/XWorm V5.6/Plugins/HVNCMemory.dll
- Size 39KB
- SHA256 285b462e3cd4a5b207315ad33ee6965a8b98ca58abb8d16882e4bc2d758ff1a4
- MD5 065f0830d1e36f8f44702b0f567082e8
- SHA1 724c33558fcc8ecd86ee56335e8f6eb5bfeac0db
- SHA512 bac0148e1b78a8fde242697bff1bbe10a18ffab85fdced062de3dc5017cd77f0d54d8096e273523b8a3910fe17fac111724acffa5bec30e4d81b7b3bd312d545
- SSDEEP 768:EofXMCBlQ6Kms0n6GE30IU1YKtq9oQog1zq/xPP7:EyXTa6hEZU1YKwo8Uj
- TLSH
  T166032B4937FA0621F1FE0AF5C873A7289331F5935506DB0E2AC960696B736C29610FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  XWorm V5.6/XWorm V5.6/Plugins/HiddenApps.dll
- Size 45KB
- SHA256 6a098f5a7f9328b35d73ee232846b13e2d587d47f473cbc9b3f1d74def7086ea
- MD5 ba2141a7aefa1a80e2091bf7c2ca72db
- SHA1 9047b546ce9c0ea2c36d24a10eb31516a24a047d
- SHA512 91e43620e5717b699e34e658d6af49bba200dcf91ac0c9a0f237ec44666b57117a13bc8674895b7a9cac5a17b2f91cdc3daa5bcc52c43edbabd19bc1ed63038c
- SSDEEP 768:aEN0W4dmvWt9VG2LqIvwYGYRpXpWk/x0qqBi3qMG0gpfN3ffiCIT:SdmvWHVGMVwtYRtpl/x5qIXdEdXiCK
- TLSH
  T1B1233848B7F88620E1FE1B3AA87363149370F4A71A16E74F0AC6A0592F723C45758BD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  XWorm V5.6/XWorm V5.6/Plugins/Informations.dll
- Size 22KB
- SHA256 cba453460be46cfa705817abbe181f9bf65dca6b6cea1ad31629aa08dbeaf72b
- MD5 67a884eeb9bd025a1ef69c8964b6d86f
- SHA1 97e00d3687703b1d7cc0939e45f8232016d009d9
- SHA512 52e852021a1639868e61d2bd1e8f14b9c410c16bfca584bf70ae9e71da78829c1cada87d481e55386eec25646f84bb9f3baee3b5009d56bcbb3be4e06ffa0ae7
- SSDEEP 384:SCUEeL4D574MvGjydqXwxDJop0n3TmyxhxJNgSg4PbOFsK:SCXeL4DSjydqXwx1FjfNfwr
- TLSH
  T1B8A21A4837F986A5D1FE1FB14C32A24543B6E60B8C12FA2F2DD8909E1D63784CA55B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32