3c87c841063eb5f0e7a5a761add49376abdd154486a0a98439deda0e5fe8a538 | Triage

Analysis

max time kernel
151s
max time network
31s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
02-03-2023 00:15

Sharing

Report Analysis Logs

General

Target

XWorm RAT LATEST/Tools/ResHacker.exe
Size

1.0MB
MD5

d285a10c73da68b027951a2038a7ae0d
SHA1

e3e5712df92ed49d6cd429799e6e557af093da06
SHA256

aeeac91ca85c59309a8d6f7109a84e1ee6d4817498417373e7c3c93dac7bb1e5
SHA512

150b47f6b4ab2c33c818843ddf30562c85055c1be5bbda7bc347bf36116b4d8d8f7b78303342e9eb667facd37a841eb7d930de325f25d170b680e97f8dfed48e
SSDEEP

24576:XS9wlTzi2gQO1PMV2DCHAJ2glv9fJVOYfJSzaSArbz2jQOS/:C9ijgQO1PMDozYAPz2UN/

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\XWorm RAT LATEST\Tools\ResHacker.exe
"C:\Users\Admin\AppData\Local\Temp\XWorm RAT LATEST\Tools\ResHacker.exe"
1⤵
PID:1632

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1632-54-0x00000000002A0000-0x00000000002A1000-memory.dmp

Filesize
4KB

Download
memory/1632-55-0x0000000000400000-0x0000000000502000-memory.dmp

Filesize
1.0MB

Download