6cfb494dc23f97c12bd3fd5800fe49f2f061466830b9771de62ea2d7d5eb8ae3

Sharing

Copy URL Twitter E-mail

General

Target
XwormKill-main.zip
Size 114KB
Sample261107-qqtxmaywby
SHA256 6cfb494dc23f97c12bd3fd5800fe49f2f061466830b9771de62ea2d7d5eb8ae3
MD5 68259930714ff35714d292cc8cac0509
SHA1 811af8b2b1d7f83503e3290b7b8f0c28e7aa5067
SHA512 7a83a884b8451c814d56f82f46a26cbf29bc7a5e0f9f64b0fd6d333b596f8c76bae84cbd4861493d08074f5859a3b9b13f4ebc31ea6e84597899c38d130b03a2
SSDEEP 3072:tiOuxakcDZ/YGerZpu2p+6T8eqldYxqCiaVDgM7cU:Kfo/YGerZc2p+6T8fd5aCMYU
TLSH
T1BEB3129818A06D46DABBE3793657483FE019E66683EC8F63C3CB50643A0167FD5BC1C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  XwormKill-main.zip
- Size 114KB
- SHA256 6cfb494dc23f97c12bd3fd5800fe49f2f061466830b9771de62ea2d7d5eb8ae3
- MD5 68259930714ff35714d292cc8cac0509
- SHA1 811af8b2b1d7f83503e3290b7b8f0c28e7aa5067
- SHA512 7a83a884b8451c814d56f82f46a26cbf29bc7a5e0f9f64b0fd6d333b596f8c76bae84cbd4861493d08074f5859a3b9b13f4ebc31ea6e84597899c38d130b03a2
- SSDEEP 3072:tiOuxakcDZ/YGerZpu2p+6T8eqldYxqCiaVDgM7cU:Kfo/YGerZc2p+6T8fd5aCMYU
- TLSH
  T1BEB3129818A06D46DABBE3793657483FE019E66683EC8F63C3CB50643A0167FD5BC1C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3
- Target
  XwormKill-main/RADEME.jpg
- Size 102KB
- SHA256 b5549807ed5ba4e5c764c4e922fdeb57c53b62ce6cfd20cb95cd2bf47d764a2c
- MD5 0efdd79a59008dbe37373698d63e0a7b
- SHA1 24b8ec15b6b679134c858716ab3244ebb94e2d13
- SHA512 4d6b5e7129042ecdc558a38efd3750fb672f6ab53bb668e28bc554af42297ff8875f8bc70c982b77a08cdf901c939c779afa33dbcdb7dcb9508619257cef2c1d
- SSDEEP 1536:6wg1A+0R1WLSXabGCHi56u2psT6Tc/4y2iFdfERbwcLaxLU6EIcMU:6W+Y+npu2p+6TjefER9iLd3U
- TLSH
  T1E5A302F12F502BCDC91AFE3278E9267BA76027203AB94FD6843CA5F571B435D62E5018
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5 behavioral6
- Target
  XwormKill-main/README.md
- Size 2KB
- SHA256 5d2201ee0d9325003f34bcc7013b22c440087837a54a728bc86e8b84b8fed1ee
- MD5 106a45eba01d1e5a53f6d100bafc4155
- SHA1 fdfbdf53124866939879437dcc7e7985deaf1d88
- SHA512 55bb82fa7ff424f815ec0ac9a5e3a5871b212822bedb54d46b4b80f4b63635537190ea4bf2ae4ac1c4a0180c62622351b76f018c03bc4dda82c207f14ca0e73c
- TLSH
  T128519563C73D9035A7920C0BD0381FC8FE3A9A19F312B476287A42C42673E55CB562AB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8 behavioral9
- Target
  XwormKill-main/XwormKill.rar
- Size 13KB
- SHA256 334ecce08d8b290bdd4e016ad38ba5e1bc295e5fb38625708ff8b8bf87ab006b
- MD5 0fb1b4c2cc41b78625486c2d89f0fb74
- SHA1 c8530cb516124410951b7cf4cadec829bb2cddb7
- SHA512 2844f268c67cc57fa3d538c6564530b5de95c433988f785914f79f7e3bb13d6f1f20e372f6402ccda6cfff3a7c56b5ed9b9da5aa97b577b625443633a16ea172
- SSDEEP 384:bgoURZ/Xfz27QaADoVDVWL41Df7Tw2XP+wK:hEvzPaADsDVWL4tXwgG
- TLSH
  T11852CFB355477AD123F8D039694A0B2FBD9352E898EA09B552B307C7388C8EC411FA98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Executes dropped EXE
behavioral10 behavioral11 behavioral12
- Target
  XwormKill/README.md
- Size 2KB
- SHA256 353aa5d9cae23c4e574f1ab0710802d0f460ca068ce6d38f95a0d4d4cdcec4be
- MD5 c27a0074b789821c021f2ed092e8f2f3
- SHA1 e9606d0afb3fa276585583262e529f7949cd97cb
- SHA512 6d00d16ec0095d742b90122f2c144a4b0c3c16ce705010f1bffaa04bc77a702833919428d907b5bc5c6eba5f5d27a8142e6a0537fcf7fe865be336e5834fdfbf
- TLSH
  T192515163D73D9031A7920C0BD0381FC5EA3A9A19F302B176286A01C41673E55CB161BB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14 behavioral15
- Target
  XwormKill/XWormKill.exe
- Size 20KB
- SHA256 6cd801be3439f02bf19bcb8e34b4ed18dc9295c7a821e7c5db41512a8679d424
- MD5 c95dabef4e903cb1d4355e49f6737562
- SHA1 a24336b229278df4dba8fbfa9d3ce5b1ef16af74
- SHA512 6186488919c009942dfbf8eea4567d729716bf53780a1d0ad4ac722bf010478c486cb185ee8fbbaec7b42bf37b0267269f87cdb8b987eb11c01e0fc4a505e149
- SSDEEP 384:Q3jPpL2KIJTSY948D9O6ioNY3amOGzPHaBrzixJs//90OQ+Ea:QGJTSYt9O6i4LT+6Br+Y0O8
- TLSH
  T15E927B1167F8C216E5BE07311CB25610427376927A33EF4E49CD558D4B67BE88B22BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18