Analysis
- max time kernel
40s - max time network
38s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
02/07/2026, 03:12
Static task
static1
Behavioral task
behavioral1
Sample
XWorm V5.6-obf (1).rar
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
XWorm V5.6-obf (1).rar
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
XWorm V5.6-obf (1).rar
Resource
win11-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
XWorm V5.6-obf (1).rar
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
General
- Target XWorm V5.6-obf (1).rar
- Size 18.5MB
- Sample260702-dqa4ashy9q
- SHA256 ca9bca55fb7c1080e2bf8566f069416673beaa42b134c569437ca7825e5a0fe8
- MD5 fca278cf54553f43623406e403aa306c
- SHA1 d4888adf533fc378ddf8b70ef6de61e8e696a02d
- SHA512 4ca2edd04eb4da527aef4d3509717c475b935a2c86803fcc25ed3a85bdf03d8a4d32793c7e285666632cfea4d49a7cbe9b41dce0856140b0820672add34a9ffa
- SSDEEP 393216:ojiVRwbmmMCwGaPyZf2wmOJqB105aiUuBmtE0CnSzO3vpkCqfONUMR/qXqq:i5+Np6Z805FBmtE0IBBljq
- TLSH T1951733BAD309BA747D8A0157BF169A23DA944991CC89664C185F37D4ECE3830CBC7A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4836 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4836 7zFM.exe Token: 35 4836 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4836 7zFM.exe