Analysis

  • max time kernel
    143s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-02-2023 05:04

General

  • Target

    XWorm V3.1 - Copy/GMap.NET.WindowsForms.dll

  • Size

    147KB

  • MD5

    32a8742009ffdfd68b46fe8fd4794386

  • SHA1

    de18190d77ae094b03d357abfa4a465058cd54e3

  • SHA256

    741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365

  • SHA512

    22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b

  • SSDEEP

    3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm V3.1 - Copy\GMap.NET.WindowsForms.dll",#1
    1⤵
      PID:4624

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads