Overview

overview

10

Static

static

10

XWorm-5.6-main.zip

windows7-x64

1

XWorm-5.6-main.zip

windows10-2004-x64

1

XWorm-5.6-...DME.md

windows7-x64

3

XWorm-5.6-...DME.md

windows10-2004-x64

3

XWorm-5.6-....6.zip

windows7-x64

1

XWorm-5.6-....6.zip

windows10-2004-x64

1

FastColore...ox.dll

windows7-x64

1

FastColore...ox.dll

windows10-2004-x64

1

Fixer.bat

windows7-x64

1

Fixer.bat

windows10-2004-x64

5

GMap.NET.Core.dll

windows7-x64

1

GMap.NET.Core.dll

windows10-2004-x64

1

GMap.NET.W...ms.dll

windows7-x64

1

GMap.NET.W...ms.dll

windows10-2004-x64

1

Guna.UI2.dll

windows7-x64

1

Guna.UI2.dll

windows10-2004-x64

1

IconExtractor.dll

windows7-x64

1

IconExtractor.dll

windows10-2004-x64

1

NAudio.dll

windows7-x64

1

NAudio.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

Plugins/Ac...ws.dll

windows7-x64

1

Plugins/Ac...ws.dll

windows10-2004-x64

1

Plugins/Chat.dll

windows7-x64

1

Plugins/Chat.dll

windows10-2004-x64

1

Plugins/Chromium.dll

windows7-x64

1

Plugins/Chromium.dll

windows10-2004-x64

1

Plugins/Clipboard.dll

windows7-x64

1

Plugins/Clipboard.dll

windows10-2004-x64

1

Plugins/Cm...ss.dll

windows7-x64

1

Plugins/Cm...ss.dll

windows10-2004-x64

1

Resubmissions

03-02-2025 19:11

250203-xv42qazngt 10

03-02-2025 19:07

250203-xswbss1rdm 10

03-02-2025 19:04

250203-xrbwrs1qhn 10

02-02-2025 15:00

250202-sdj8rswpez 10

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    03-02-2025 19:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    XWorm-5.6-main/XWorm 5.6.zip

  • Size

    17.4MB

  • MD5

    69df77ff7a55fbcbf97200066f79e6ab

  • SHA1

    59f0b96c823a86590429b16fc3d348922a993c49

  • SHA256

    1e375f8854533938ed2823a0116c5eee9532f8be5da4b4510061043d8d7e5ceb

  • SHA512

    09585915ceec6183aaa3b945da61587ea14c7fd0079cde6287c0d5e58cae1b817fdedd3c4b64efc101b724db7c52a03b89230bce78e516301ae13a2ba45f1dc0

  • SSDEEP

    393216:2ECt9WHkSLozx3Xd8i8yxmsxdeaPWrUMsOo4XeE+3QexeuXHw:2EHHkSLoVei6Var4X23QgeyHw

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\XWorm-5.6-main\XWorm 5.6.zip"
    1⤵
      PID:1012
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:2808
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x4e8
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:2120

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads