Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
31-12-2024 09:12
General
-
Target
XWorm_V5.6.rar
-
Size
22.7MB
-
MD5
ca1bb901b72e1a47432873302d22d189
-
SHA1
5588ae724d0b1d0ee2b7f0499a91fddaf0728e9e
-
SHA256
925ffc337d52c2f80433a1d619afe9c275a2d6aecfc0e2c4bc85bf0f4264f9d4
-
SHA512
68e268a3c622b4d8babdeedf8eac5668e81c59262335708983b1f309dc1001ed3af4fa3e435e86d79e63fb4b40dcc470a6a3181c35cceada531c52f659bbc304
-
SSDEEP
393216:RdepDaX2jh48NY/7Nh9GqVsrRMg+e/oa3yS6pe1glP/jXCzSoCLfPfEqDvDFEqRG:RdiD3m8eNvbzg8+gP+IfPfLvDFEqRG
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\XWorm_V5.6.rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow