Resubmissions

18-11-2024 05:21

241118-f11stazdrk 10

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    18-11-2024 05:21

General

  • Target

    XWorm/XWorm V5.1/Plugins/ProcessManager.dll

  • Size

    17KB

  • MD5

    eb4f3ba934cf42c45f564071c843db19

  • SHA1

    da69dab6c42295c3f44bc36cca37803e13aa8535

  • SHA256

    e068a0e8e15e3d329929bf365483136e7f0eb2a60f1deac9eadb7b2628813d7b

  • SHA512

    31c9ff22ed50aa6df704b63843bddb11db712259dd61cd7ba3bfda89ce79612f3b9a9b4e839083bca19fe1fe0e51d54928799fc9f6f62517e3cfd3e685a6980e

  • SSDEEP

    384:CdfDSm8iGh5I84ZQsCH97/Y5gLCEYptkpnrDhwK4TkAvfsxfZLnVb:CdfDV8iwmyhlYlTkAv0H

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm\XWorm V5.1\Plugins\ProcessManager.dll",#1
    1⤵
      PID:2580

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads