Xworm V5[.]6 LOFN[.]exe

Resubmissions

20/10/2026, 08:09

261020-j2l8laxvbw

20/10/2026, 08:09

261020-j167daxva13

Sharing

Copy URL Twitter E-mail

General

Target
Xworm V5.6 LOFN.exe
Size 12.7MB
Sample261020-j2l8laxvbw
SHA256 16fc8fb5a18ce612c8c1e1a3aa0c6be985dcf9cd99bef9ea0064e30922134769
MD5 2970cc15b4e5671a03176e9eee5213f5
SHA1 6f8ea89d69ae0a31415977bc76034ed5d444b6f2
SHA512 5f7e0ff5830f8d8cda7c8d693b9992545f6f8ed71da78aea459567cda3db3596f412f04fb0fcf9126a4966817ae1b3445f5881d8ba3b30249afb84a45653ea0a
SSDEEP 393216:o65hqDs4jeWKMa1tv+UoRUzpugrffBJ7HtNkwg:o65Eg4SOan+U1u2xJbb
TLSH
T196D6236299E54802F7688F3C46ABB12C36FBB1F02331B45BD6D6CCB5DD0A3D2616950E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Xworm V5.6 LOFN.exe

File Explorer

Xworm V5.6 LOFN.exe

.exe 12.7MB

Xworm V5.6 LOFN.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 16fc8fb5a18ce612c8c1e1a3aa0c6be985dcf9cd99bef9ea0064e30922134769
MD5 2970cc15b4e5671a03176e9eee5213f5
SHA1 6f8ea89d69ae0a31415977bc76034ed5d444b6f2
SHA512 5f7e0ff5830f8d8cda7c8d693b9992545f6f8ed71da78aea459567cda3db3596f412f04fb0fcf9126a4966817ae1b3445f5881d8ba3b30249afb84a45653ea0a
SSDEEP 393216:o65hqDs4jeWKMa1tv+UoRUzpugrffBJ7HtNkwg:o65Eg4SOan+U1u2xJbb
TLSH
T196D6236299E54802F7688F3C46ABB12C36FBB1F02331B45BD6D6CCB5DD0A3D2616950E
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13311822

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Xworm V5.6 LOFN.exe

mscoree

dotnet