Resubmissions

18-11-2024 05:21

241118-f11stazdrk 10

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    18-11-2024 05:21

General

  • Target

    XWorm/XWorm V5.1/Plugins/TCPConnections.dll

  • Size

    16KB

  • MD5

    e3ed1afe1f8fd7745ce8419a353b7500

  • SHA1

    59a6aec16969f546772876a101ff09b503e58f0b

  • SHA256

    be49f6452b73ce3168e776ed64a9826f794e80d218faf49d093389889a149c11

  • SHA512

    8279d59a816439618fc7b6eec2892911e81c5e917bbdc8a75dbfb4eda64856a6b0e75582b71477961d04abe9d8008583876433f93d330f309b57972943adc9b4

  • SSDEEP

    192:DKo8pevV3pE6vGvyj2T/Qfpp/dv/f2OtyEox0GTeA19Z/J6IW1Gz/tZYCKKIxLWz:v8pevfvGvmxhD2wyzTeej/Zz/ZNLv

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm\XWorm V5.1\Plugins\TCPConnections.dll",#1
    1⤵
      PID:2536

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads