f0eb7f58edc94075cf2d0567ad4b9c7153f7bdeca5e3537ee88360214f6a9076

Analysis

max time kernel
113s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
12-04-2023 20:35

Target

XWorm-RAT-main/XWorm RAT V2.1/Plugins/DeletePoints.dll
Size

9KB
MD5

bcca9532b7ba99863f929f10087a6d43
SHA1

04a8c8374adb5ef9b316bdf92eba8deaf5e7f947
SHA256

8ea85db9c8e12d3a0240a02d6f0cd9b8b115a0fcb1b24b70d03278c828c31879
SHA512

d59453d83f9c9283c10ecaeadb2e376e86b4ae05f64a91f82b5b4653262db1bb0812ec4a4e1a30c68c8bb6f5ee1a784552936649af0e05cfeab203abd6082f69
SSDEEP

192:nPyV1Piyl52HzGO8X140TwIW12nH8i7eVMLW7:nPyfvWydXTZnHZ7et7

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5068 2908 WerFault.exe

pid	pid_target	process	target process
5068	2908	WerFault.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm-RAT-main\XWorm RAT V2.1\Plugins\DeletePoints.dll",#1
1⤵
PID:372

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 184 -p 2908 -ip 2908
1⤵
PID:3868

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2908 -s 1772
1⤵
- Program crash
PID:5068