Overview

overview

10

Static

static

10

XWorm V6.5....5.exe

windows10-2004-x64

10

XWorm V6.5....5.exe

windows11-ltsc_2024-x64

1

Resubmissions

11/10/2026, 19:58

261011-yqb1tagc84

09/10/2026, 16:55

261009-vfbqhscg5910

Sharing

Copy URL Twitter E-mail

General

  • Target
    XWorm V6.5.rar
  • Size 28.3MB
  • Sample261009-vfbqhscg59
  • SHA256 1bdc32a364331e3b2d73420fa5e3a411c432bc7ba9dfef00d5a18af4071d8c51
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
stormkittyxwormdefense_evasiondiscoverypyinstallerratstealertrojan

Malware Config

Extracted

Family

  • xworm

Version

  • XWorm V6.5 by c3lestial.fun

Mutex

  • D52UE6JxcU0UBqXJ

Attributes
  • install_file

    USB.exe

  • localhost

    127.0.0.1

aes.plain
aes.plain

Targets

    • Target
      XWorm V6.5/XWorm V6.5.exe
    • Size 9.4MB
    • SHA256 d9830213d3d73a30020a30bbc409efc55992cd8618ed305e87f0bc3e2a10a7f2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoveryxwormrattrojan

    • Detect Xworm Payload

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Executes dropped EXE

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks