Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/08/2026, 11:20
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
XWorm V3.0.rar
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
XWorm V3.0.rar
Resource
win10ltsc2021-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
XWorm V3.0.rar
Resource
win11-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
XWorm V3.0.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target XWorm V3.0.rar
- Size 23.9MB
- Sample260831-nfd3bas1ew
- SHA256 7f7c2ed7a2fd6163a6004386287033bcaca83d7332fd592e4291c8a89252ea5a
- MD5 f38e858f5ee1fd28cff7d67aa5bcd91c
- SHA1 0cd4d698e0d96892f2840edc3edb84327cc25d22
- SHA512 7c8556b361d4f69601892317d0a070e0d374f1b6d554f7e1ed7bb669b5eccdb55e2665d5460998909b7cece4c660b9f75231080b312ce9c753880122765874b7
- SSDEEP 393216:edY1Ze39n+LWKFa0zoSVV8f2aG2aIKKBfg9LXbBBn4QCV1jyjDVkOQ08T:edY63wfamVV8fpGNIKKBfUTbBBeVByfI
- TLSH T1144733C6B2A853980C56B8ECFBC3C5D9CF442BA2045D7138A621C5927D6DB80F7E5F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4964 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4964 7zFM.exe Token: 35 4964 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4964 7zFM.exe