7c270da2506ba3354531e0934096315422ee719ad9ea16cb1ee86a7004a9ce27 | Triage

Analysis

max time kernel
92s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
10/10/2024, 15:32 UTC

Sharing

Report Analysis Logs

General

Target

XWorm-5.6-main/Plugins/Microphone.dll
Size

540KB
MD5

9c3d90ccf5d47f6eef83542bd08d5aeb
SHA1

0c0aa80c3411f98e8db7a165e39484e8dae424c7
SHA256

612898afdf9120cfef5843f9b136c66ecc3e0bb6f3d1527d0599a11988b7783c
SHA512

0786f802fbd24d4ab79651298a5ba042c275d7d01c6ac2c9b3ca1e4ee952de7676ec8abf68d226b72696e9480bd4d4615077163efbcda7cff6a5f717736cbdfe
SSDEEP

12288:+0OeMv3MrIb8CkZKobg3Wi1bRuSvazv+Uro:ROe+WIb8CkZLbg3Wa8Waz2j

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\XWorm-5.6-main\Plugins\Microphone.dll,#1
1⤵
PID:228

Network

DNS

11.227.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

11.227.111.52.in-addr.arpa

IN PTR

Response

No results found

8.8.8.8:53

11.227.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

11.227.111.52.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads