Analysis
- user interaction
yes - max time kernel
44s - max time network
47s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
29/04/2026, 04:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XWorm V6.5.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
XWorm V6.5.exe
Resource
win11-20260130-en
0 signatures
150 seconds
General
- Target XWorm V6.5.exe
- Size 5.6MB
- Sample260429-fbav4act3j
- SHA256 afd4bc108d2feb94bb53048f6dbc2b46614629a3d944f14968c978cc49eb6036
- MD5 f9de7e13c6d64d61bf83d330fe930359
- SHA1 7a023ce2f48e6fc7c44e38d793e7c5fae517ba15
- SHA512 c8441dc05b930e5d4f1b220d5022214c6d26626ef23796e5b816bcfc231394c0cbfe85ec781b4f6475e3d6d1c2e559e1ef87a7371809044a3c0c2523f284d76f
- SSDEEP 98304:rPl8SHjzKxLjHqvdRDdJMXvBAmm9hXZWWhpVqQHQwvQm:rPBHjzKtjSZJqvBAzhXZWWBJI
- TLSH T12746BE23B96795A1C70A5736C2F70C30C7E5D7A13753F21B3A4E13465CA2BBA8A50D3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\XWorm V6.5.exe"C:\Users\Admin\AppData\Local\Temp\XWorm V6.5.exe"1⤵PID:1628
-
C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\GetHelp.exe"C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\GetHelp.exe" -ServerName:App.AppXc53jt7x72yk6zj4f70fb3gxetfvdh22w.mca1⤵PID:3356
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1040