stormkitty | a9dba11247caf7bbc4c1dad5b96112bf6d5e5ce61aab40e5d32a8f584ac486b8

General

Target
XWorm V5.6.zip
Size 24.2MB
Sample261107-qvmzwact3v
SHA256 a9dba11247caf7bbc4c1dad5b96112bf6d5e5ce61aab40e5d32a8f584ac486b8
MD5 c7eaaf1f9c5665b0de0dfd233dd7aa32
SHA1 311110d46ee812b535f9b70e07671b9dd77cc037
SHA512 c9640c9fcf53727989491a8b77c98aa4e566a486b803d22cbff15f74b8a2fdec3e0512e12a3383d08fe8e4ab3f907601f480d0408fc740e3ccc82acd7c58ef30
SSDEEP 786432:rC+WbxdVc4YvU8c6P0qBB4gGc8MZBZpwbM:/WbxdVdn8c6Ph1Gc8MZBZV
TLSH
T1144733A6C8571392C0A4657D289FC75E530AC6E4E3E47B2E7F806B1CDCAF841DD642AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

29.tcp.cpolar.top:10802

Mutex

pmakzhVt6b4X9Xi0

Attributes

install_file
USB.exe
localhost
127.0.0.1

aes.plain

Targets

- Target
  XWorm V5.6.zip
- Size 24.2MB
- SHA256 a9dba11247caf7bbc4c1dad5b96112bf6d5e5ce61aab40e5d32a8f584ac486b8
- MD5 c7eaaf1f9c5665b0de0dfd233dd7aa32
- SHA1 311110d46ee812b535f9b70e07671b9dd77cc037
- SHA512 c9640c9fcf53727989491a8b77c98aa4e566a486b803d22cbff15f74b8a2fdec3e0512e12a3383d08fe8e4ab3f907601f480d0408fc740e3ccc82acd7c58ef30
- SSDEEP 786432:rC+WbxdVc4YvU8c6P0qBB4gGc8MZBZpwbM:/WbxdVdn8c6Ph1Gc8MZBZV
- TLSH
  T1144733A6C8571392C0A4657D289FC75E530AC6E4E3E47B2E7F806B1CDCAF841DD642AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  XWorm V5.6/XWorm V5.6/Xworm V5.6_Slayed.exe
- Size 14.9MB
- SHA256 629fc7d0043148a28afb49e4ffa42b3fbf2ad6c9a803064dd8bb4dacd7f2b1ac
- MD5 3a775a8f58dce03de33a2b9edd7c8632
- SHA1 db9165618d34204c9d6e550d345ae4e5d5fdcc0e
- SHA512 9b938b9667add48ee8ce77d3af78ac46583867e445a6c038dc2bfdde6bda769981353223c52858dede440f6d8c5253dd02cca6651cf39746408ddee5051d967f
- SSDEEP 196608:1S/BAe1d4ihvy85JhhYc3BSL1kehn4inje:1MyIhhkRka4i
- TLSH
  T10CF69E107BD6800AE47169B00A946AE199BEBE9F2B15D8A930C4331C57F64CCF993FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4