68129eb55be1281185a2280aefb34b0445fa6a1897f3ee857c9b67aa00d48bf9

Sharing

Copy URL Twitter E-mail

General

Target
XWorm V3.1.7z
Size 24.3MB
Sample261003-vkl22sshqf
SHA256 68129eb55be1281185a2280aefb34b0445fa6a1897f3ee857c9b67aa00d48bf9
MD5 fc90807c3104858c05428755d8157b8b
SHA1 8363c60d4876a1f2ba1c4e16ba623a7dcd34fdb0
SHA512 70c77c70d11a951a3354fffa3e2a9c77ab2c439e33419fae75d34d9810eb8668ad8128532d481f906ee8d860de980c2ee8bad05d590b83b6f00e5a63fb1e469f
SSDEEP 786432:JwB+6vm1xL9gKh0tdx960jAT0tLvD6lTr7sPjRf:DrKtdC0B5vDw3sPjd
TLSH
T1784733761639C23F5CBA918D411A11DA8FD76EFF3B8638C9C432A11ECF690B17A64907
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  XWorm V3.1/NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- TLSH
  T156B45C2237E4962BD1AF5775E4E1191B8BB1F8423237D78F8684BB6E1D837924C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  XWorm V3.1/Plugins/ActiveWindows.dll
- Size 14KB
- SHA256 5679768b449a8e59b5a9ad8eb6e9fcd7e03c70869da8fd7b6cec5e948aac56b1
- MD5 abf694ddb10c63e5205444b442e49706
- SHA1 8d9d2beba8240b2795b6113db9a158219e63ffeb
- SHA512 63c44c10b88f2a2655887a93b1f4b2288f99d2ae3622ff7f62a9edf4ff9325ebb66e16215572fe896e46fc335364b203f632124e9409b9f863189306a9499f30
- SSDEEP 384:IqIGejCUccJeGCJWM2YFegdT8Ft0Y7XZ316DMz:IqIGeXcWrCJ+EtYZ316Du
- TLSH
  T14B620755E3E54331C6FE1AB34C7323401B70C2099C53FB1E4EDC6096AF63A9986957BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  XWorm V3.1/Plugins/All-In-One.dll
- Size 4.8MB
- SHA256 effaa01f092dda8351e6f4a4a1bc651acf91865a4f512a3a336b7e6fea495bda
- MD5 8b462f2be3497eb66347a6047180d759
- SHA1 601974b1547653fa38f84a5e2b6cef1d4a4214ca
- SHA512 6fb8226192277cfda113805154cf83c01590db1b159add775d21db0101b8c5b45847ceef27f105d0275b1b1dc692cc5774f7777795ae8e832301836bed5d4843
- SSDEEP 98304:nl19F9QORkChiDC9OtH7c2iwGxIvPBOw0JefVfQ2a5cFd4KssODtd:z9FPRkC8C9OH7c2ilInz0kfVo26Wsd
- TLSH
  T1953623187FE18717F9EF97F1D5A2420A9BF4E053B356E79F5E9484E9388230089222D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  XWorm V3.1/Plugins/Chat.dll
- Size 18KB
- SHA256 185efd0dda1032e4e738b674877bb2c0de931b02f69057d6ee00914f9b8f6db7
- MD5 a25cbb61fadacf30d8e4b638c097d30b
- SHA1 ba3ba796c8dfc5e802179c1a85ebdaab0ed35c78
- SHA512 7dc53503402c69e9d659de45993ceffdf61824d853eb55fda921469f683df2f6ba44f76ec1462d5614a8cafd95e976615d4cd94e28c068eed22e56ed5ab67826
- SSDEEP 384:zUeLD8aDbXCtSeEd3uq7uQZRHUrwTKvt0GIKoIDfiUWGfZ:+kbCtSeE5uq7uQYr0HIDfiX6
- TLSH
  T102823A2DA395C3F2C6FD2BF64C72928107B1D221DE03FF2A9ECC946A9DA37854644785
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  XWorm V3.1/Plugins/Clipboard.dll
- Size 14KB
- SHA256 6e6d2010f02c4a2b8372ed98728e68d740d262df05be811942e26229f21af1b9
- MD5 3873c7a085d349ee7d80f19a1d04466a
- SHA1 df563f40438603db051e97ba5d15b8d064eaa918
- SHA512 12a806f5f035c69fe4ed3859cb42e1441924185d40c23c026a57ce052c9a4060bc1d5fb7d289db4d94be093fbb763075cd667c6db5aee3541defd076c5163b2d
- SSDEEP 192:kAXyVpJlyIxlioHESRJ29u+6ZWSYASO3tOXXgNTen1i9iY6IW1mX/60/jAqEM7RL:kXVpuoHpMDfAR98STe1oi2X/6xMrwU
- TLSH
  T148523B59B3D44339C6EE1AB21C7392800774D715AC13FF2E2CD8A0B15DAB6D58762BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  XWorm V3.1/Plugins/FileManager.dll
- Size 27KB
- SHA256 4da7b92dd81ff96931aa9012eabaa0878d13c78dc3cd840b102ce7e15fec4b7b
- MD5 35e01d48dc293c1ee38fb76a001fc6fd
- SHA1 36b5ec73b188bed24e8549f1f9244acc89e2ecc7
- SHA512 210260c3802c21a48f84bc5c865d4b8fd804258d160ca8d20032e32650f4e197a650463e6cb56e7b459b6043046be17b146d26a4ee41b0e215c842ba5ecf6cd3
- SSDEEP 384:tp4K215dISbc/TY0mN1PGDQXSBJVYol/tF37enOAkxqb8cq/hsutzgk/b7oBxkpE:h21vWk0yPGsXAr7dtRKPb8V3dmjC0b
- TLSH
  T131C22BAE3BD08211D5FE89B2497295080730EA039823FF5E7DC4359E9E33AD64A107F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  XWorm V3.1/Plugins/FileSeacher.dll
- Size 478KB
- SHA256 1d97563568c011b93d3149bfd062d81647b1ccb9ab87b270e39a518d108f77d1
- MD5 f7bea87f295d1d4284ae396a822950a0
- SHA1 d8c7bdac70c147dfc1432b6794a821d9b07d720a
- SHA512 8061d47255769a398d4a1f608260c211de4be71d3475d4284f0df881b371de172cc334f323ad4bb9d702ceac6de0ae700f3006d9c2e383bd41f1742d0ae8b2e9
- SSDEEP 6144:zPv5T5fIIC8W8XqeGtSV41QJDsTDDh0Yhe6dwxLV/vuhgS0mkdwcG:znfIICLlS4Ys50ie6CfigSjE
- TLSH
  T139A48D406BE8C657F1BF27B6C4F262A0C7B0E465A52EDB8F5D4024EE2D17340E9117AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  XWorm V3.1/Plugins/HRDP.dll
- Size 1.7MB
- SHA256 52ebcc3cd12ee6ce2274cc289386beb7a9dc31a4a2b583dbab5495b67b32ca27
- MD5 144178b1a4f5e6b19b01a272d29a2f0b
- SHA1 0af94d62ac2e0c9db3f9d7054382c5226efd21f5
- SHA512 928b0dd4c9cc0c4edb8d64acdc6dd8e9c92951af2bd218ffd0f5991109133b4b30bdbabe4f4762b8d14f9c15ecde716404cfc036ece4d7b2d6db159428ad7fb9
- SSDEEP 24576:brKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:6HZ5pdqYH8ia6GcKuR7
- TLSH
  T1B5851918F6D8423ED857D2359A7153B2D7FAB9482F20738A2928075A7F2B3D02B3575C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  XWorm V3.1/Plugins/HVNC.dll
- Size 58KB
- SHA256 8918b5549441692917ab504e1ad9455d8e62eff189becadee048e6c1493d1bbb
- MD5 9dfed469828dc9a5ec89e3cd21d5b74a
- SHA1 8422ba84ef565ad495958249bc940b527e9c9460
- SHA512 ce8bdb7e820c3d910c3a6232552e2a576a4c03cc128dd6d4eba5b48f3b1ff397e0abc9918e0f08d550962b81e69dfb3cab579a2ac81e2c57658da2c35a9be9f8
- SSDEEP 1536:8SheTaT7z12BWR74mdItPighZ+7YvgxBFQ:jheTKz12BWR76BhbynQ
- TLSH
  T180434A4567E58A31E1FE0F76887397108771F2635913EB0E1BC5A0A96FA33828651BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  XWorm V3.1/Plugins/Informations.dll
- Size 22KB
- SHA256 88569d549e184ef63f2c2ae4e3c3adc9d957296b6a67cf0ee94287d681cc0934
- MD5 da772b035ae5b347de1b17e2e24463dc
- SHA1 5ba3cdaf6e33c58cfd8ccecbe14310a035e00523
- SHA512 ba396154e899dca31312ab9e2a14682aed0a51b5d45db4b0c72efad5cd74767c5bde2bf90099bd886a52adcdf8abb66ff16dcd992ed6a7598ce49e3afaa95922
- SSDEEP 384:DnQf5APE80e6vkD7RQQpOJXWn3TmoNhxJNSOFD45fZ41:DnQfGPEOD7vcJKj3NSRZQ
- TLSH
  T104A21A98B3E44265D1FE2AB30872904513B6F70B9D13FA2D1EC8919E4D73784CA54BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  XWorm V3.1/Plugins/Keylogger.dll
- Size 17KB
- SHA256 e2daf2c0841090b2dff517e14acd48d393b899be1e213f001229d1af9a1de2b8
- MD5 84e36d752271a46310b0afb8482a08ce
- SHA1 2e922c41f7136f327f74354afe7eace5484cb2d5
- SHA512 0b1632a766feec97de5e30a22e6abca67119e53d8715bc22d15970731e91446b17b625614cad79d887299dbc5b5fa78c66db2b0c36167a3009a678a5086b726c
- SSDEEP 192:BLCuLDdyxqvzfZ3ium13gyWacxv8ilNwOHLnq4UP1XPeDN6IW1Y6Up90Kli8Jlb0:QuDdYe0umJ6xfwEO4UNWD8Upt15h6V
- TLSH
  T152825D0D77D88375C5FE9AB20C3363501BB1C209A803FB6E2DDC716A5E93B854B54AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  XWorm V3.1/Plugins/Maps.dll
- Size 15KB
- SHA256 241be6a9343d9b9a81877af9a072dd4e3de671b6f6dedf8d19b01139cd19a516
- MD5 b09308a5c0b7e0bc67ccbe32a8d043aa
- SHA1 d0d1cc4213e5b8f721fc35753a747794e0af7afb
- SHA512 9fd8406cc75f3c10bc3c74f23d3e9b58e64ca19370162e5cfd52cfd5517240a98612093a849db3d7a011e736c09578748f8c33cddf51be737852b2dcfcf9cd25
- SSDEEP 192:IzW/qqmhqfohvEajSJz+5q6gn+jNq7gGte31HC9T6IW14X/bQeIac3t2vLOo2:ZqqmhxvEajr53xgjteFi9BX/bXwt1o2
- TLSH
  T184622A17A7E48271DBFE0FB24C72620117B6D609CD03FB1E29DC506A5E27696CE21772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  XWorm V3.1/Plugins/Microphone.dll
- Size 540KB
- SHA256 9b73be7a27b5aa8cabf10c79a6e515db6b59962cad3945dada2eff57bb56bfdf
- MD5 8105f5149e1fea72e27f0a1455d956bc
- SHA1 6722d54df38b89284c3375efda3985155e6f5b8e
- SHA512 4f1aaa81263bb17aa7b495cab056fd9b18058247df874866bd9cb6247f180989a0d549ce0b4595c7a636e4d6279e92004c4f159c30e8b381a1a51b9d54a84d10
- SSDEEP 6144:0iwpFWBbjRTvqihWI1ElZT2J2CDt4azYPfb78+OmmN8fCgN8OQSoYCY8gQNUyFJU:LkFWBxTvTWzlZSYXbg6TSJUYTPzeVzn
- TLSH
  T19CC45C11BBD49627D16F33B2E0E20F2A57B1E4467326EB4F169097E89ED77424C01BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  XWorm V3.1/Plugins/Ngrok-Disk.dll
- Size 7.0MB
- SHA256 61dd7fef160748b70e706e3afb21b100b55950edcf6899d97a8b8d52035bff75
- MD5 32be6f1d8c99be26ab2b1391073e3dff
- SHA1 70c186a44ec935b7083ad2981ad23df128f690bf
- SHA512 291caf23708fce9eff090df21cc78d3795435ccc47a47e46352fc456d9f2909277e657c874c7ffb603a350b0c4c76e88ec904eeca0a09955d70b4506379ce498
- SSDEEP 196608:dCsxED7kwTV6B/nCR7+AA3e5MryK5Rj1Bpw7Vdjz8wEO+Dl:dTED7/VEqt/A3TryARj1BpwLktl
- TLSH
  T1B37633287BD48167FBEF67F1CD92414A0BF46017B2DAE7CE19DA48FE1D81300992169B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  XWorm V3.1/Plugins/Options.dll
- Size 24KB
- SHA256 f899ff9ec2a4e63c6b1bd14d8978550c2befc3dba18f1c97e4f9e01f24890b6e
- MD5 074e336fb076c4805fea3b1b07655f19
- SHA1 39c402b592deef46c4e5d2f45fe4f29cbd5e6ff7
- SHA512 2e2b0a0f61b2498d3042d313f820aabc2903f8ab567c22a0c414b500d0e382e6f00cf4aed941ea2830e4123823036215a3802e11b849e348a4f737bb9decf03e
- SSDEEP 384:GUd0+k0mA1+2EyhoafV8bKKJtMCNI9LfGyHs5RBndE9Lz9NRc3Bw:GUdSO+i3yb4Lfds5RNW9jRce
- TLSH
  T175B2F950B7F40668F5FF0F35AEB561248A36FC469D22EA1D4984600E5C73AD1CAA1F36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  XWorm V3.1/Plugins/Pastime.dll
- Size 17KB
- SHA256 6c73d14b4de11e7d8f4dd65105280083086570ded5908870ad07a04f436de1e3
- MD5 7d76bd3c8ef11f53723287989ef902cf
- SHA1 71a14614ce2b85920092fd701d8264910f1ec40a
- SHA512 1fd0ec708123066b793c2f54b521bfc0b18b8383f913745fcbc20cd82d7dbb1c141e93bcc88e2a66a876266d613151467b72b7119d768ddf9b65fa97bda3baad
- SSDEEP 384:hzO/ClGe/9GGzHQl3HREpi5/mY7//Al5sA8/rHbx:hzO/CEe/9GGzHQxH+wH/dA8/rHt
- TLSH
  T104822A255BE58271C2FE1EF148B3B3000379E342DE03EF1E99D87516AD73986C620BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32