0ea39ad1a4a162efdfd1aeeb734603c2049fb91bd736907266e0e9d49f6030be | Triage

Analysis

max time kernel
9s
max time network
15s
platform
windows7_x64
resource
win7-20240903-de
resource tags

arch:x64arch:x86image:win7-20240903-delocale:de-deos:windows7-x64systemwindows
submitted
21-12-2024 10:08

Sharing

Reason

Machine shutdown

Report Analysis Logs

General

Target

XWorm V5.6/Plugins/HVNC.dll
Size

58KB
MD5

30eb33588670191b4e74a0a05eecf191
SHA1

08760620ef080bb75c253ba80e97322c187a6b9f
SHA256

3a287acb1c89692f2c18596dd4405089ac998bb9cf44dd225e5211923d421e96
SHA512

820cca77096ff2eea8e459a848f7127dc46af2e5f42f43b2b7375be6f4778c1b0e34e4aa5a97f7fbabe0b53dcd351d09c231bb9afedf7bcec60d949918a06b97
SSDEEP

768:XsKVHERYe3lgPPTxOEUyP82P6mUrYrthCO7h2ORS9SQdHfiLpmbG8p:8K1ERYe0TEE3P82P1EMS36Kp

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm V5.6\Plugins\HVNC.dll",#1
1⤵
PID:2860

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x0
1⤵
PID:2888

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x1
1⤵
PID:332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/332-1-0x0000000002BB0000-0x0000000002BB1000-memory.dmp

Filesize
4KB

Download
memory/2888-0-0x0000000002E90000-0x0000000002E91000-memory.dmp

Filesize
4KB

Download