General
- Target XWorm V5.0.exe
- Size 10.4MB
- Sample260916-y2wvcss1ex
- SHA256 7471ff7818da2e044caf5bd89725b6283ed0304453c18a0490d6341f3a010ca2
- MD5 227494b22a4ee99f48a269c362fd5f19
- SHA1 d32d08cf93d7f9450aee7e1e6c39d9d83b9a35c9
- SHA512 71070e6b8042fa262ce12721e6c09104aec0a61ac0d6022f59f838077109b9476a5c1f8409242d93888eff6d36f0ee76337481fefe6f05e0f1243efbf350bee0
- SSDEEP 196608:z59nhcOWSxxgQHl2np1eY5J5itQaZWtU8i/MJ:zRRWQBQnpji1W+8i/
- TLSH T11BB6F16132DF0D92E9FE1EB4EC5527842F78A6F30166511CB9CC1CE55D9A2389E8A3F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
XWorm V5.0.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
XWorm V5.0.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target XWorm V5.0.exe
- Size 10.4MB
- SHA256 7471ff7818da2e044caf5bd89725b6283ed0304453c18a0490d6341f3a010ca2
- MD5 227494b22a4ee99f48a269c362fd5f19
- SHA1 d32d08cf93d7f9450aee7e1e6c39d9d83b9a35c9
- SHA512 71070e6b8042fa262ce12721e6c09104aec0a61ac0d6022f59f838077109b9476a5c1f8409242d93888eff6d36f0ee76337481fefe6f05e0f1243efbf350bee0
- SSDEEP 196608:z59nhcOWSxxgQHl2np1eY5J5itQaZWtU8i/MJ:zRRWQBQnpji1W+8i/
- TLSH T11BB6F16132DF0D92E9FE1EB4EC5527842F78A6F30166511CB9CC1CE55D9A2389E8A3F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.