Analysis
- max time kernel
148s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
27/10/2026, 11:04
General
- Target XWormClient.exe
- Size 104KB
- Sample261027-m6hmract9s
- SHA256 b9575ad9f2632210b172d88a8477c52e4d27adc2cd7db12961b29b0b3b21c500
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\XWormClient.exe"C:\Users\Admin\AppData\Local\Temp\XWormClient.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5436-0-0x00007FFC8FD4F000-0x00007FFC8FD50000-memory.dmp
memory/5436-1-0x00000000000E0000-0x0000000000100000-memory.dmp
memory/5436-2-0x00007FFC8FBC0000-0x00007FFC90564000-memory.dmp
memory/5436-3-0x00007FFC8FBC0000-0x00007FFC90564000-memory.dmp
memory/5436-4-0x00007FFC8FBC0000-0x00007FFC90564000-memory.dmp
memory/5436-5-0x00007FFC8FBC0000-0x00007FFC90564000-memory.dmp
memory/5436-6-0x00007FFC8FBC0000-0x00007FFC90564000-memory.dmp