Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

XWorm/XWor...db.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...db.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ks.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...il.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ts.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...re.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...rs.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ed.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ls.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...io.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...on.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ws.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ne.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...at.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...rd.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ss.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...er.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...er.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...DP.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...NC.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ry.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ns.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...er.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ps.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ox.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ne.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...sk.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ns.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...me.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ce.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...er.dll

windows10-ltsc 2021-x64

1

XWorm/XWor...ms.dll

windows10-ltsc 2021-x64

1

Resubmissions

06/01/2025, 00:17

250106-algthazmav 10

Analysis

  • max time kernel
    122s
  • max time network
    133s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241211-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    06/01/2025, 00:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    XWorm/XWorm V5.1/Plugins/HVNC.dll

  • Size

    58KB

  • MD5

    f385b6b4bb2600a95d152564151efa5f

  • SHA1

    b70ba4324df9d39ec686e38eb135a515bc4499c8

  • SHA256

    77edb581f60e4e04ff0c997c28b57f6fa93416e7a87d0f0daaae302866b78d35

  • SHA512

    af55e3eb48b6142ae978999226ecfe996ddd6158e220a2e0b0e0c1f312d29486640f62e827d75bf1352374b1d2a3dea7bb9141380f46c653e2ced96ea5d3a561

  • SSDEEP

    1536:DK1+hYeRT6z12BWR7fE3XZll/72NGaM2fDP:o+hYekz12BWR70Ckab7P

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\XWorm\XWorm V5.1\Plugins\HVNC.dll",#1
    1⤵
      PID:2104
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=4220,i,9196809988335597270,13533469875825522379,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:8
      1⤵
        PID:2504
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=4032,i,9196809988335597270,13533469875825522379,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:8
        1⤵
          PID:4252

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads