Analysis

  • max time kernel
    70s
  • max time network
    76s
  • platform
    windows10-1703_x64
  • resource
    win10-20231025-en
  • resource tags

    arch:x64arch:x86image:win10-20231025-enlocale:en-usos:windows10-1703-x64system
  • submitted
    03-12-2023 01:33

General

  • Target

    XWorm V5.0/Plugins/Ngrok-Disk.dll

  • Size

    7.0MB

  • MD5

    e3c892f7d12dfcf91d242f8c6c575ca5

  • SHA1

    74f080b7b06457f218cf140ccf844c19e642b2df

  • SHA256

    39d54c2acbe0ee389d836852393eb87ac0b1344409225d4f1423d7df4d3544e7

  • SHA512

    7da4dfdc187c70be2e03d1587888657da2fe50966fd7371373a1d6933e4c611bd17a75285dd55818431b727387e92dbd74f151fe4cbe7e5b5137f814b154fa72

  • SSDEEP

    196608:6CsxED7kwTV6B/nCR7+AA3e5MryK5Rj1Bpw7Vdjz8wEO+Dl:6TED7/VEqt/A3TryARj1BpwLktl

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm V5.0\Plugins\Ngrok-Disk.dll",#1
    1⤵
      PID:4712

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads