0ea39ad1a4a162efdfd1aeeb734603c2049fb91bd736907266e0e9d49f6030be | Triage

Analysis

max time kernel
9s
max time network
14s
platform
windows7_x64
resource
win7-20240903-de
resource tags

arch:x64arch:x86image:win7-20240903-delocale:de-deos:windows7-x64systemwindows
submitted
21-12-2024 10:08

Sharing

Reason

Machine shutdown

Report Analysis Logs

General

Target

XWorm V5.6/Plugins/HiddenApps.dll
Size

45KB
MD5

ba2141a7aefa1a80e2091bf7c2ca72db
SHA1

9047b546ce9c0ea2c36d24a10eb31516a24a047d
SHA256

6a098f5a7f9328b35d73ee232846b13e2d587d47f473cbc9b3f1d74def7086ea
SHA512

91e43620e5717b699e34e658d6af49bba200dcf91ac0c9a0f237ec44666b57117a13bc8674895b7a9cac5a17b2f91cdc3daa5bcc52c43edbabd19bc1ed63038c
SSDEEP

768:aEN0W4dmvWt9VG2LqIvwYGYRpXpWk/x0qqBi3qMG0gpfN3ffiCIT:SdmvWHVGMVwtYRtpl/x5qIXdEdXiCK

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm V5.6\Plugins\HiddenApps.dll",#1
1⤵
PID:1248

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x0
1⤵
PID:2408

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x1
1⤵
PID:2576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2408-0-0x0000000002DA0000-0x0000000002DA1000-memory.dmp

Filesize
4KB

Download
memory/2576-1-0x0000000002AC0000-0x0000000002AC1000-memory.dmp

Filesize
4KB

Download