Resubmissions

18-11-2024 05:21

241118-f11stazdrk 10

Analysis

  • max time kernel
    90s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-11-2024 05:21

General

  • Target

    XWorm/XWorm V5.1/Plugins/Recovery.dll

  • Size

    1.1MB

  • MD5

    d143dd13436ea071cfffa0355d94c835

  • SHA1

    c726d0a1ec3285cc2bb659eabc3811e7f4c0a29c

  • SHA256

    03911e6b4e99f2d2b3db157f63404ae1710ed244b5e14922191766b2c3db6489

  • SHA512

    289194267f580a00aa6bedfdc070cd4f4dc4d848f5f1a7f51c765b3ebe3ae9a696428dbcac29e378357e6bd58316a6c1b19202bbb1443a5e0cd698ca5ec09828

  • SSDEEP

    12288:Q2uX3iDoOeiWYcW3GFNFfcaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchc:rNeiWYtc/5/jbOE8ULrVmCCo

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm\XWorm V5.1\Plugins\Recovery.dll",#1
    1⤵
      PID:32

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads