Resubmissions
03-02-2025 19:11
250203-xv42qazngt 1003-02-2025 19:07
250203-xswbss1rdm 1003-02-2025 19:04
250203-xrbwrs1qhn 1002-02-2025 15:00
250202-sdj8rswpez 10Analysis
-
max time kernel
63s -
max time network
67s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
03-02-2025 19:04
Behavioral task
behavioral1
Sample
XWorm-5.6-main.zip
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
XWorm-5.6-main.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
XWorm-5.6-main.zip
-
Size
17.4MB
-
MD5
f8766a4d7853f38b9a5cb8b9e7e601a0
-
SHA1
23eb644f84f35180aaf334f00659e8b907b45833
-
SHA256
09630f5f1a47d6fe6b02d74de4c077876b6c607c183e241e82e72d10fb4c0ea0
-
SHA512
65dbea03faa6f50d454292cbccd51ca099ab82bb56136643df69ea4790a842464a99cce79a26b8d1813be221bd4486c7c16d7b14597f269e0f2030f2d2f2574a
-
SSDEEP
393216:wA1udbqUg2idC/kZz9g+430arKdAcXrO5VyAEBQ2T0ORhk:wCXUg2IhZS65rO5V8BQS04hk
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\XWorm-5.6-main.zip1⤵PID:4604
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2336