Overview

overview

10

Static

static

10

XWorm/Fixer.bat

windows10-1703-x64

1

XWorm/NAudio.dll

windows10-1703-x64

1

XWorm/Plug...ip.dll

windows10-1703-x64

1

XWorm/Plug...ws.dll

windows10-1703-x64

1

XWorm/Plug...ne.dll

windows10-1703-x64

1

XWorm/Plug...AC.dll

windows10-1703-x64

1

XWorm/Plug...OD.dll

windows10-1703-x64

1

XWorm/Plug...en.dll

windows10-1703-x64

1

XWorm/Plug...ks.dll

windows10-1703-x64

1

XWorm/Plugins/Bot.dll

windows10-1703-x64

1

XWorm/Plug...at.dll

windows10-1703-x64

1

XWorm/Plug...um.dll

windows10-1703-x64

1

XWorm/Plug...rd.dll

windows10-1703-x64

1

XWorm/Plug...er.dll

windows10-1703-x64

1

XWorm/Plug...ss.dll

windows10-1703-x64

1

XWorm/Plug...ts.dll

windows10-1703-x64

1

XWorm/Plug...ts.dll

windows10-1703-x64

1

XWorm/Plug...ns.dll

windows10-1703-x64

1

XWorm/Plug...WD.dll

windows10-1703-x64

1

XWorm/Plug...il.dll

windows10-1703-x64

1

XWorm/Plug...er.dll

windows10-1703-x64

1

XWorm/Tool...er.exe

windows10-1703-x64

1

XWorm/XHVNC.exe

windows10-1703-x64

1

XWorm/XWor...en.exe

windows10-1703-x64

1

XWorm/XWorm.exe

windows10-1703-x64

1

Analysis

  • max time kernel
    50s
  • max time network
    139s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    21-02-2023 08:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    XWorm/Plugins/DisableWD.dll

  • Size

    13KB

  • MD5

    015a3af937bc633ea5a2965d8d1a9d8e

  • SHA1

    abeb97fe5dc8b6181463ce8ac08c9d7c6f587eba

  • SHA256

    19cf8cd1c95073932b0b179852d2c4f2aa0c7a1d255918043e449fcdeccc7471

  • SHA512

    1a1a8d8f30ea06d79df8dd24c54fdb9c5c27362c675d62f12189a5366c54ed52c1a21bae3f8ba438e5c71606df4e4cfe722e211211c2e12f22695d52cd7541cb

  • SSDEEP

    192:rQLEv8T4LLpNkQvmDbeNEDTRQmCkUE2WKU1GO0zb7lgJ1T9IW1Un/3eKtfKioieO:rojqEdJUEDtw9zbyJ1TMn/3eulV4XbU

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\XWorm\Plugins\DisableWD.dll,#1
    1⤵
      PID:4100

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads