Analysis

  • max time kernel
    35s
  • max time network
    45s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-10-2022 15:49

General

  • Target

    XWorm-RAT-main/XWorm RAT V2.1/resource/data.exe

  • Size

    6.5MB

  • MD5

    a21db5b6e09c3ec82f048fd7f1c4bb3a

  • SHA1

    e7ffb13176d60b79d0b3f60eaea641827f30df64

  • SHA256

    67d9b4b35c02a19ab364ad19e1972645eb98e24dcd6f1715d2a26229deb2ccf5

  • SHA512

    7caab4f21c33ef90c1104aa7256504ee40ff0a36525b15eb3d48940862346ccf90a16eef87c06d79b0ffd920beb103ed380eae45df8c9286768890b15ed1067c

  • SSDEEP

    98304:KAc94bqa9niwFYWLqDuTTTTTTdfPPpWLq+Guf2W2b6F72q0:KAcC9iwFYWuDCPPpWu+GduZ2L

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\XWorm-RAT-main\XWorm RAT V2.1\resource\data.exe
    "C:\Users\Admin\AppData\Local\Temp\XWorm-RAT-main\XWorm RAT V2.1\resource\data.exe"
    1⤵
      PID:4904

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4904-132-0x0000000000390000-0x0000000000A22000-memory.dmp
      Filesize

      6.6MB

    • memory/4904-133-0x0000000005400000-0x000000000549C000-memory.dmp
      Filesize

      624KB

    • memory/4904-134-0x0000000005A50000-0x0000000005FF4000-memory.dmp
      Filesize

      5.6MB

    • memory/4904-135-0x00000000054A0000-0x0000000005532000-memory.dmp
      Filesize

      584KB

    • memory/4904-136-0x00000000053D0000-0x00000000053DA000-memory.dmp
      Filesize

      40KB

    • memory/4904-137-0x00000000056F0000-0x0000000005746000-memory.dmp
      Filesize

      344KB

    • memory/4904-138-0x0000000009BB0000-0x0000000009C16000-memory.dmp
      Filesize

      408KB