Analysis
-
max time kernel
1440s -
max time network
1446s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
27-11-2024 21:03
General
-
Target
XWorm V5.6 virusRB.zip
-
Size
24.2MB
-
MD5
c9d3e530958e4fb52d19a56a69bc838c
-
SHA1
6e0b785508bab8d7650bbe671a24f00449b2643a
-
SHA256
067e651b1d79aa932f0903718dfe0c9d60d55e5dc6aac5a8c2799ed546b45a74
-
SHA512
4c2ef732cb7aced02920c23995e9a7f3887f4bed99ddb5d99128b4587676e8f98fb0a54a355227decc8420dd2a08f59ffa34a0a1930bccb696c41d568ca8f3ed
-
SSDEEP
393216:myapqgXFeuBc9Q+F+vZ5+dh9QCLMu7kjOscAKbD2b2lh5eNYJkY29QEH4J:myfgXDBYQwYZYhkjxKhT5eXPQEYJ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\XWorm V5.6 virusRB.zip"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow