0ea39ad1a4a162efdfd1aeeb734603c2049fb91bd736907266e0e9d49f6030be | Triage

Analysis

max time kernel
10s
max time network
15s
platform
windows7_x64
resource
win7-20240903-de
resource tags

arch:x64arch:x86image:win7-20240903-delocale:de-deos:windows7-x64systemwindows
submitted
21-12-2024 10:08

Sharing

Reason

Machine shutdown

Report Analysis Logs

General

Target

XWorm V5.6/Plugins/FilesSearcher.dll
Size

478KB
MD5

6f8f1621c16ac0976600146d2217e9d2
SHA1

b6aa233b93aae0a17ee8787576bf0fbc05cedde4
SHA256

e66e1273dc59ee9e05ce3e02f1b760b18dd296a47d92b3ce5b24efb48e5fb21b
SHA512

eb55acdea8648c8cdefee892758d9585ff81502fc7037d5814e1bd01fee0431f4dde0a4b04ccb2b0917e1b11588f2dc9f0bfe750117137a01bbd0c508f43ef6a
SSDEEP

6144:ZAHdfUpnnBuIbE7SCQeGtSV41QJDsTDDh0Yhe6dwxLV/Quhg08OwR75:yVUpnkZ7slS4Ys50ie6Cfzg0M

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm V5.6\Plugins\FilesSearcher.dll",#1
1⤵
PID:2364

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x0
1⤵
PID:2152

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x1
1⤵
PID:2724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2152-0-0x0000000002F10000-0x0000000002F11000-memory.dmp

Filesize
4KB

Download
memory/2724-1-0x0000000002B40000-0x0000000002B41000-memory.dmp

Filesize
4KB

Download