Overview

overview

10

Static

static

10

Xworm-V5.zip

windows11-21h2-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Xworm-V5.zip

  • Size

    11.7MB

  • MD5

    f07acfa3b107da68bad69c812f46c750

  • SHA1

    8a0190c5275363e7595f20b4e5870ff4938f36c6

  • SHA256

    f31b54cce625a6a33deb903119c3cf215f71f4b637d6a2526106f5454db488ec

  • SHA512

    0bf7028c3a40b402112b349bdcba26d24b641b210f735468b7b44754d589a9e4b5635c357746f109647479f623c1686f06b23b2da7a624db7eb76e5c6e4c5804

  • SSDEEP

    196608:K9GeDVI5DKBWZlkgJedYs6LtYdEhqTgKDiTJeszyxSL1kehn4iXJ3i:KkYVI5DK2NNs6LtYdEhSp0QcXRka4ic

Score
10/10
agilenetxworm

Malware Config

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    agilenet
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Xworm-V5.zip
    .zip
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.MBox.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.MIC.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.Maps.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.Performance.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.Port.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.ProcessV.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.Programs.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.Proxy.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.Ransomware.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.Registry.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.RemoteDesktop.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.Resources.resources
    .vbs
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.RunPE.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.ServiceManager.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.Shell.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.Sound.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.StartupManager.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.TBotNotify.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.TXT.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.TcpConnectionForm.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.ToolsBox.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.VBCode.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.VoiceChat.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.WebCam.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/RES/XWorm.ngrok.resources
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/SimpleObfuscator.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/Sounds/Chat.wav
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/Sounds/Intro.wav
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/XWorm V5.6.exe.config
    .xml
  • Xworm-V5/Xworm-V5.6/Xworm-V5.6/Xworm V5.6.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections