Analysis
- max time kernel
150s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
27/10/2026, 11:53
General
- Target XWormClient.exe
- Size 104KB
- Sample261027-n2crdacw9x
- SHA256 d76768f8751ebb02b398c906eb774fb38c92e76d36085b23bc077b282fc2b20f
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\XWormClient.exe"C:\Users\Admin\AppData\Local\Temp\XWormClient.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3860-1-0x0000000000400000-0x0000000000420000-memory.dmp
memory/3860-0-0x00007FFDB411F000-0x00007FFDB4120000-memory.dmp
memory/3860-2-0x00007FFDB3F90000-0x00007FFDB4934000-memory.dmp
memory/3860-3-0x00007FFDB3F90000-0x00007FFDB4934000-memory.dmp
memory/3860-4-0x00007FFDB3F90000-0x00007FFDB4934000-memory.dmp