XwormKill-main.zip
- SHA256 6cfb494dc23f97c12bd3fd5800fe49f2f061466830b9771de62ea2d7d5eb8ae3
Password
1233
Overview
overview
7Static
static
3XwormKill-main.zip
windows10-2004-x64
1XwormKill-main.zip
windows10-ltsc_2021-x64
1XwormKill-main.zip
windows11-21h2-x64
1XwormKill-...ME.jpg
windows10-2004-x64
1XwormKill-...ME.jpg
windows10-ltsc_2021-x64
1XwormKill-...ME.jpg
windows11-21h2-x64
XwormKill-...DME.md
windows10-2004-x64
3XwormKill-...DME.md
windows10-ltsc_2021-x64
3XwormKill-...DME.md
windows11-21h2-x64
3XwormKill-...ll.rar
windows10-2004-x64
7XwormKill-...ll.rar
windows10-ltsc_2021-x64
1XwormKill-...ll.rar
windows11-21h2-x64
1XwormKill/README.md
windows10-2004-x64
3XwormKill/README.md
windows10-ltsc_2021-x64
3XwormKill/README.md
windows11-21h2-x64
3XwormKill/...ll.exe
windows10-2004-x64
1XwormKill/...ll.exe
windows10-ltsc_2021-x64
1XwormKill/...ll.exe
windows11-21h2-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XwormKill-main.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
XwormKill-main.zip
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
XwormKill-main.zip
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
XwormKill-main/RADEME.jpg
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
XwormKill-main/RADEME.jpg
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
XwormKill-main/RADEME.jpg
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
XwormKill-main/README.md
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
XwormKill-main/README.md
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
XwormKill-main/README.md
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
XwormKill-main/XwormKill.rar
Resource
win10v2004-20260911-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral11
Sample
XwormKill-main/XwormKill.rar
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
XwormKill-main/XwormKill.rar
Resource
win11-20260911-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
XwormKill/README.md
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral14
Sample
XwormKill/README.md
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
4 signatures
150 seconds
Behavioral task
behavioral15
Sample
XwormKill/README.md
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
XwormKill/XWormKill.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
XwormKill/XWormKill.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
XwormKill/XWormKill.exe
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
General
- Target XwormKill-main.zip
- Size 114KB
- Sample261107-qqtxmaywby
- SHA256 6cfb494dc23f97c12bd3fd5800fe49f2f061466830b9771de62ea2d7d5eb8ae3
- MD5 68259930714ff35714d292cc8cac0509
- SHA1 811af8b2b1d7f83503e3290b7b8f0c28e7aa5067
- SHA512 7a83a884b8451c814d56f82f46a26cbf29bc7a5e0f9f64b0fd6d333b596f8c76bae84cbd4861493d08074f5859a3b9b13f4ebc31ea6e84597899c38d130b03a2
- SSDEEP 3072:tiOuxakcDZ/YGerZpu2p+6T8eqldYxqCiaVDgM7cU:Kfo/YGerZc2p+6T8fd5aCMYU
- TLSH T1BEB3129818A06D46DABBE3793657483FE019E66683EC8F63C3CB50643A0167FD5BC1C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/XwormKill/XWormKill.exe
File Explorer
-
XwormKill-main.zip.zip 114KB
-
XwormKill-main/RADEME.jpg.jpg 102KB
-
XwormKill-main/README.md2KB
-
XwormKill-main/XwormKill.rar.rar 13KB
-
XwormKill/README.md2KB
-
XwormKill/XWormKill.exe.exe 20KB
XwormKill-main/RADEME.jpg
- SHA256 b5549807ed5ba4e5c764c4e922fdeb57c53b62ce6cfd20cb95cd2bf47d764a2c
- MD5 0efdd79a59008dbe37373698d63e0a7b
- SHA1 24b8ec15b6b679134c858716ab3244ebb94e2d13
- SHA512 4d6b5e7129042ecdc558a38efd3750fb672f6ab53bb668e28bc554af42297ff8875f8bc70c982b77a08cdf901c939c779afa33dbcdb7dcb9508619257cef2c1d
- SSDEEP 1536:6wg1A+0R1WLSXabGCHi56u2psT6Tc/4y2iFdfERbwcLaxLU6EIcMU:6W+Y+npu2p+6TjefER9iLd3U
- TLSH T1E5A302F12F502BCDC91AFE3278E9267BA76027203AB94FD6843CA5F571B435D62E5018
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1233
XwormKill-main/README.md
- SHA256 5d2201ee0d9325003f34bcc7013b22c440087837a54a728bc86e8b84b8fed1ee
- MD5 106a45eba01d1e5a53f6d100bafc4155
- SHA1 fdfbdf53124866939879437dcc7e7985deaf1d88
- SHA512 55bb82fa7ff424f815ec0ac9a5e3a5871b212822bedb54d46b4b80f4b63635537190ea4bf2ae4ac1c4a0180c62622351b76f018c03bc4dda82c207f14ca0e73c
- TLSH T128519563C73D9035A7920C0BD0381FC8FE3A9A19F312B476287A42C42673E55CB562AB
- MD5 SHA1 SHA512 TLSH
XwormKill-main/XwormKill.rar
- SHA256 334ecce08d8b290bdd4e016ad38ba5e1bc295e5fb38625708ff8b8bf87ab006b
- MD5 0fb1b4c2cc41b78625486c2d89f0fb74
- SHA1 c8530cb516124410951b7cf4cadec829bb2cddb7
- SHA512 2844f268c67cc57fa3d538c6564530b5de95c433988f785914f79f7e3bb13d6f1f20e372f6402ccda6cfff3a7c56b5ed9b9da5aa97b577b625443633a16ea172
- SSDEEP 384:bgoURZ/Xfz27QaADoVDVWL41Df7Tw2XP+wK:hEvzPaADsDVWL4tXwgG
- TLSH T11852CFB355477AD123F8D039694A0B2FBD9352E898EA09B552B307C7388C8EC411FA98
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1233
XwormKill/README.md
- SHA256 353aa5d9cae23c4e574f1ab0710802d0f460ca068ce6d38f95a0d4d4cdcec4be
- MD5 c27a0074b789821c021f2ed092e8f2f3
- SHA1 e9606d0afb3fa276585583262e529f7949cd97cb
- SHA512 6d00d16ec0095d742b90122f2c144a4b0c3c16ce705010f1bffaa04bc77a702833919428d907b5bc5c6eba5f5d27a8142e6a0537fcf7fe865be336e5834fdfbf
- TLSH T192515163D73D9031A7920C0BD0381FC5EA3A9A19F302B176286A01C41673E55CB161BB
- MD5 SHA1 SHA512 TLSH
XwormKill/XWormKill.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6cd801be3439f02bf19bcb8e34b4ed18dc9295c7a821e7c5db41512a8679d424
- MD5 c95dabef4e903cb1d4355e49f6737562
- SHA1 a24336b229278df4dba8fbfa9d3ce5b1ef16af74
- SHA512 6186488919c009942dfbf8eea4567d729716bf53780a1d0ad4ac722bf010478c486cb185ee8fbbaec7b42bf37b0267269f87cdb8b987eb11c01e0fc4a505e149
- SSDEEP 384:Q3jPpL2KIJTSY948D9O6ioNY3amOGzPHaBrzixJs//90OQ+Ea:QGJTSYt9O6i4LT+6Br+Y0O8
- TLSH T15E927B1167F8C216E5BE07311CB25610427376927A33EF4E49CD558D4B67BE88B22BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1233
Minor OS version
0
Major OS version
4
Entry point
20110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ