Overview

overview

10

Static

static

10

XWorm-v5.6...ed.zip

windows7-x64

1

XWorm-v5.6...ed.zip

windows10-2004-x64

1

CefSharp.exe

windows7-x64

7

CefSharp.exe

windows10-2004-x64

7

FastColore...ox.dll

windows7-x64

1

FastColore...ox.dll

windows10-2004-x64

1

Fixer.bat

windows7-x64

1

Fixer.bat

windows10-2004-x64

1

GMap.NET.Core.dll

windows7-x64

1

GMap.NET.Core.dll

windows10-2004-x64

1

GMap.NET.W...ms.dll

windows7-x64

1

GMap.NET.W...ms.dll

windows10-2004-x64

1

GeoIP.dat

windows7-x64

3

GeoIP.dat

windows10-2004-x64

3

Guna.UI2.dll

windows7-x64

1

Guna.UI2.dll

windows10-2004-x64

1

IconExtractor.dll

windows7-x64

1

IconExtractor.dll

windows10-2004-x64

1

Logs\ErrorLogs.txt

windows7-x64

1

Logs\ErrorLogs.txt

windows10-2004-x64

1

NAudio.dll

windows7-x64

1

NAudio.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

Plugins\Ac...ws.dll

windows7-x64

1

Plugins\Ac...ws.dll

windows10-2004-x64

1

Plugins\Chat.dll

windows7-x64

1

Plugins\Chat.dll

windows10-2004-x64

1

Plugins\Chromium.dll

windows7-x64

1

Plugins\Chromium.dll

windows10-2004-x64

1

Plugins\Clipboard.dll

windows7-x64

1

Plugins\Clipboard.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    30-11-2024 03:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    GMap.NET.WindowsForms.dll

  • Size

    147KB

  • MD5

    32a8742009ffdfd68b46fe8fd4794386

  • SHA1

    de18190d77ae094b03d357abfa4a465058cd54e3

  • SHA256

    741e1a8f05863856a25d101bd35bf97cba0b637f0c04ecb432c1d85a78ef1365

  • SHA512

    22418d5e887a6022abe8a7cbb0b6917a7478d468d211eecd03a95b8fb6452fc59db5178573e25d5d449968ead26bb0b2bfbfada7043c9a7a1796baca5235a82b

  • SSDEEP

    3072:k1GmgYqIY/0YSDBRGlDUqL63budipxj64m8HWYh3vHbFwMhLJSb+:lIO6rGloqL63qW62lJ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\GMap.NET.WindowsForms.dll,#1
    1⤵
      PID:2756

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads