Analysis
-
max time kernel
150s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
04-08-2023 20:40
Static task
static1
Behavioral task
behavioral1
Sample
XWorm.V3.1.7z
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
XWorm.V3.1.7z
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
XWorm V3.1.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
XWorm V3.1.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
XWorm V3.1.exe.xml
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
XWorm V3.1.exe.xml
Resource
win10v2004-20230703-en
General
-
Target
XWorm V3.1.exe
-
Size
7.0MB
-
MD5
b7a300c6953f42f199c2ff903feac72f
-
SHA1
8f7d38270d33ae7f1b1fa49cd03ecfc63576a8b8
-
SHA256
f40b8ef92f828123c81a8b275ab0e29e44b44b3a175e452eea72a475f6cfaf80
-
SHA512
80ef310b54e8c54b80649651acb58c07251bdcf1cde9ead0b85123fee2922e40958a78cc029bb28a69c8ea993952c4cf973b4448b9d24580c535a7460dfbca47
-
SSDEEP
196608:JLQ6B/XKUDz9NoUXJzUWi7MYjBVvo5/UV:FFlaU/9NZXJZinjB9oxg
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4852 XWorm V3.1.exe