Analysis

  • max time kernel
    78s
  • max time network
    88s
  • platform
    windows10-1703_x64
  • resource
    win10-20231129-en
  • resource tags

    arch:x64arch:x86image:win10-20231129-enlocale:en-usos:windows10-1703-x64system
  • submitted
    03-12-2023 01:33

General

  • Target

    XWorm V5.0/Plugins/HVNCMemory.dll

  • Size

    39KB

  • MD5

    97faf21b4e6b301d146a0eb71c98d8e0

  • SHA1

    fd1a54df528afa5f4e5419a603d3fbfe603770d0

  • SHA256

    e0ce2cdbccc44d098e631c4f18ffdc1846ea1bfa606b53768ce8291252379721

  • SHA512

    9cc9e233fc270c2189b3e1edc6376fc0f31c1ba76e89eb0819e1a054a42e994632fac3af9bfb774f812e68b3593b13a6555e4b103afbd2b9cf3b5dbfeb27ee3a

  • SSDEEP

    768:dXlPA0Dw2JS0Qj/1OM2ZrMEgLKja9eQzmUmpbI:dVPPvU0aOM2+LPdHR

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm V5.0\Plugins\HVNCMemory.dll",#1
    1⤵
      PID:4192

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads