Overview

overview

7

Static

static

3

vcxsrv-64....er.exe

windows11-21h2-x64

7

$PLUGINSDI...em.dll

windows11-21h2-x64

3

bitmaps/autogen.sh

windows11-21h2-x64

3

bitmaps/uninstall.exe

windows11-21h2-x64

7

dxtn.dll

windows11-21h2-x64

1

libX11.dll

windows11-21h2-x64

1

libXau.dll

windows11-21h2-x64

1

libXext.dll

windows11-21h2-x64

1

libXmu.dll

windows11-21h2-x64

1

libcrypto-1_1-x64.dll

windows11-21h2-x64

1

libgcc_s_sjlj-1.dll

windows11-21h2-x64

1

libiconv-2.dll

windows11-21h2-x64

1

libwinpthread-1.dll

windows11-21h2-x64

1

libxcb.dll

windows11-21h2-x64

1

libxml2-2.dll

windows11-21h2-x64

1

msvcp140.dll

windows11-21h2-x64

1

plink.exe

windows11-21h2-x64

1

swrast_dri.dll

windows11-21h2-x64

1

swrastwgl_dri.dll

windows11-21h2-x64

1

vcruntime140.dll

windows11-21h2-x64

1

vcruntime140_1.dll

windows11-21h2-x64

1

vcxsrv.exe

windows11-21h2-x64

1

xauth.exe

windows11-21h2-x64

1

xcalc.exe

windows11-21h2-x64

1

xclock.exe

windows11-21h2-x64

1

xhost.exe

windows11-21h2-x64

1

xkbcomp.exe

windows11-21h2-x64

1

xlaunch.exe

windows11-21h2-x64

1

xrdb.exe

windows11-21h2-x64

1

xwininfo.exe

windows11-21h2-x64

1

zlib1.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    25s
  • max time network
    159s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    25-08-2024 11:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    xcalc.exe

  • Size

    596KB

  • MD5

    47b12c9d4012b2ac13e5a5fba9576aea

  • SHA1

    863075423fb509455939caee82f5c581ec38f3d3

  • SHA256

    cba1fdcd7d558829c50f76bb1b6135bba55fb89d3f574d49dd522812d4672472

  • SHA512

    bc38437ede3e4f93188fc91df8d2196ae1ce42acb38180123878f4ceb148cbfb92133f26b3fcb8547a01d4f397742bd2cc4ae1c268fa4614e91bf199844a3691

  • SSDEEP

    12288:1OnIBmpSqEgi9qrFKtvuzPCIeqj6f55xQUqJyeEEXLkhu:11BwEhqrFKtvujCIeqj6x5HqkEXL

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\xcalc.exe
    "C:\Users\Admin\AppData\Local\Temp\xcalc.exe"
    1⤵
      PID:4564

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads