Analysis
- geolocation tags
nanew-jerseynorth-americaunited-statesususa - max time kernel
900s - max time network
463s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 06:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XWorm V6.0.exe
Resource
win10v2004-20260911-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
XWorm V6.0.exe
Resource
win11ltsc2024-20260911-en
0 signatures
900 seconds
General
- Target XWorm V6.0.exe
- Size 11.9MB
- Sample261024-hd3d8sgt4x
- SHA256 dde3d4265f4b1014773b0f81baef7b7d1b77e71745d9f1398027d1a96ef9e762
- MD5 36778a19caf40e47e6d41253d011dc0b
- SHA1 1b4e719b127022e1e983e93954d3a54f7fe69e02
- SHA512 6cc57533fcacc5b449514361cd8d15251ecdfb510ead5426ba7a8fafe16766c2c1e365cf959f6c8e867cdec90743c3e8150abf85d395faa292adfdd541853467
- SSDEEP 98304:r7s0M4+8D3f37ST/JPa71uWTvLP9Pk6gAK6n4ldyNhe7ul5V9tRGaSB:r7kg37mPah7L1kehn4ie7w93E
- TLSH T159C64912F2818416E87815B004174AB075B4BE497F6CD9B67CCA772C2AF61ECB92F7E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\XWorm V6.0.exe"C:\Users\Admin\AppData\Local\Temp\XWorm V6.0.exe"1⤵PID:4892
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:2436
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5972