Analysis
-
max time kernel
19s -
platform
windows11-21h2_x64 -
resource
win11-20250313-en -
resource tags
arch:x64arch:x86image:win11-20250313-enlocale:en-usos:windows11-21h2-x64system -
submitted
24/03/2025, 20:50
Behavioral task
behavioral1
Sample
XWorm.zip
Resource
win11-20250313-en
0 signatures
150 seconds
General
-
Target
XWorm.zip
-
Size
61.4MB
-
MD5
03d3bc4ca9e97844b2d1608b037c88a2
-
SHA1
60b67a5dd67abc0d7569684c5655ee7800eead5c
-
SHA256
4c8aec36b2c33a17dc95ddd41d71649448d91f17f5ce563261dea7ec73b91e76
-
SHA512
c107bf480e3fa60adede09fde1c94fc1bb3c25afbc34214b996b4920fe308a5a6f9d7f6493d317e128dc6f4aaa4d4378c06feb2c786e16f6d44745adbe6ddbac
-
SSDEEP
1572864:ltbxdVdiIbzAGEaPcsq6WgmTy6bxdVdMIbzAGE3sqn3kUo2uGbHm:l5/MGEwt8gmTyOtMGEcV3GDm
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\XWorm.zip1⤵PID:4196
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1532