Analysis

  • max time kernel
    53s
  • max time network
    76s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    21-02-2023 08:28

General

  • Target

    XWorm/XHVNC.exe

  • Size

    1.9MB

  • MD5

    c37f177e2879dc2ecdceaf1aeb449406

  • SHA1

    e982cd723945ef180a6625a383fc380d709fa03a

  • SHA256

    b34eef7bcfe99893c161988f810f4306533cff5a8de58d715c0ed091af5abbd1

  • SHA512

    7832f8329928d608a6e5f9a34045d78fcf16221e498e977d075e14c7a757ec2445e6970359731c34d57ac9535d7586d35bae61e448e64b4ea9af173e2b32cfaf

  • SSDEEP

    24576:R3DsCsazef+APWb6+CILRbTcJiWevOIWr9Lrdl5p0WdaMCtGjC+UbC:B8F+CWb6+CILRncZe65rb5p0ehVCre

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\XWorm\XHVNC.exe
    "C:\Users\Admin\AppData\Local\Temp\XWorm\XHVNC.exe"
    1⤵
      PID:8

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/8-117-0x0000000000A80000-0x0000000000C6A000-memory.dmp
      Filesize

      1.9MB

    • memory/8-118-0x00000000059F0000-0x0000000005EEE000-memory.dmp
      Filesize

      5.0MB

    • memory/8-119-0x00000000054F0000-0x0000000005582000-memory.dmp
      Filesize

      584KB

    • memory/8-120-0x0000000005590000-0x000000000562C000-memory.dmp
      Filesize

      624KB

    • memory/8-121-0x0000000005630000-0x0000000005696000-memory.dmp
      Filesize

      408KB

    • memory/8-122-0x0000000005890000-0x00000000058A0000-memory.dmp
      Filesize

      64KB