Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
13-11-2024 18:39
Behavioral task
behavioral1
Sample
XWorm 5.6 Cracked.zip
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
General
-
Target
XWorm 5.6 Cracked.zip
-
Size
24.2MB
-
MD5
353c221103efd60bd38f1625a21c80d7
-
SHA1
414e3eb44d636a628b455a4d8b2997cb06564f14
-
SHA256
e0be40f12d3b6dfee674688d514287be2dbedbd114ec37356b610e25996ac9a4
-
SHA512
2d94d46d43afaa43b7515f06455525008601c77cdf5663e3f28220917d2c8b7a9ca0423a521edac56fb51e45dd6264168db101018ed4e83ccc0d46a123cdd7f1
-
SSDEEP
393216:wyazqFXFeuBc9Q+FpI3zDuG9YCMeg7kjuABAKbybbF6s5eNYJkY29QEH4k:wyVFXDBYQw23fkkjGKOj5eXPQEYk
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1792 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1792 7zFM.exe Token: 35 1792 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1792 7zFM.exe