0ea39ad1a4a162efdfd1aeeb734603c2049fb91bd736907266e0e9d49f6030be | Triage

Analysis

max time kernel
9s
max time network
12s
platform
windows7_x64
resource
win7-20240903-de
resource tags

arch:x64arch:x86image:win7-20240903-delocale:de-deos:windows7-x64systemwindows
submitted
21-12-2024 10:08

Sharing

Reason

Machine shutdown

Report Analysis Logs

General

Target

XWorm V5.6/Plugins/Informations.dll
Size

22KB
MD5

67a884eeb9bd025a1ef69c8964b6d86f
SHA1

97e00d3687703b1d7cc0939e45f8232016d009d9
SHA256

cba453460be46cfa705817abbe181f9bf65dca6b6cea1ad31629aa08dbeaf72b
SHA512

52e852021a1639868e61d2bd1e8f14b9c410c16bfca584bf70ae9e71da78829c1cada87d481e55386eec25646f84bb9f3baee3b5009d56bcbb3be4e06ffa0ae7
SSDEEP

384:SCUEeL4D574MvGjydqXwxDJop0n3TmyxhxJNgSg4PbOFsK:SCXeL4DSjydqXwx1FjfNfwr

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm V5.6\Plugins\Informations.dll",#1
1⤵
PID:2928

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x0
1⤵
PID:2224

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x1
1⤵
PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2224-0-0x0000000002DA0000-0x0000000002DA1000-memory.dmp

Filesize
4KB

Download
memory/2888-1-0x0000000002BB0000-0x0000000002BB1000-memory.dmp

Filesize
4KB

Download