nworm | fffe3c68f5caeea568830803b982c3e58ad3e101e0241614bf5e87d2c07e7ab4

Login
Reports

Overview

overview

Static

static

Red-Flaged...89.exe

windows11-21h2-x64

Red-Flaged...d2.exe

windows11-21h2-x64

Red-Flaged...b6.exe

windows11-21h2-x64

Red-Flaged/Jigsaw.exe

windows11-21h2-x64

Red-Flaged/Locky.exe

windows11-21h2-x64

Red-Flaged....1.exe

windows11-21h2-x64

Red-Flaged....A.exe

windows11-21h2-x64

Red-Flaged/N-W0rm.exe

windows11-21h2-x64

Red-Flaged....A.exe

windows11-21h2-x64

Red-Flaged...df.exe

windows11-21h2-x64

Red-Flaged/Remcos.exe

windows11-21h2-x64

Red-Flaged...re.exe

windows11-21h2-x64

Red-Flaged...66.exe

windows11-21h2-x64

Red-Flaged...cs.exe

windows11-21h2-x64

Red-Flaged...an.exe

windows11-21h2-x64

Red-Flaged...ui.exe

windows11-21h2-x64

Red-Flaged...0r.exe

windows11-21h2-x64

Red-Flaged...AT.exe

windows11-21h2-x64

Red-Flaged/Xeno.exe

windows11-21h2-x64

Red-Flaged/XenoUI.exe

windows11-21h2-x64

Red-Flaged...er.exe

windows11-21h2-x64

Red-Flaged...d7.exe

windows11-21h2-x64

Red-Flaged...0e.exe

windows11-21h2-x64

Red-Flaged...74.exe

windows11-21h2-x64

Red-Flaged...6a.exe

windows11-21h2-x64

Red-Flaged...80.exe

windows11-21h2-x64

Red-Flaged...c7.exe

windows11-21h2-x64

Red-Flaged...a6.exe

windows11-21h2-x64

Red-Flaged...ea.exe

windows11-21h2-x64

Red-Flaged...3b.exe

windows11-21h2-x64

Red-Flaged...6a.exe

windows11-21h2-x64

Red-Flaged...eb.exe

windows11-21h2-x64

Resubmissions

08/09/2026, 15:38

15/08/2026, 21:05

15/08/2026, 20:50

15/08/2026, 20:46

15/08/2026, 20:40

15/08/2026, 20:39

14/08/2026, 18:03

06/08/2026, 22:09

06/08/2026, 03:52

04/08/2026, 06:18

Analysis

max time kernel
900s
max time network
918s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/04/2026, 11:29

Sharing

Copy URL Twitter E-mail

Static task

static1

89 signatures

Behavioral task

behavioral1

Sample

Red-Flaged/JaffaCakes118_2363f93331fc792ae9cb5750043bdc89.exe

Resource

win11-20260130-en

windows11-21h2-x64

18 signatures

900 seconds

collection credential_access discovery execution matiex keylogger persistence spyware stealer

Behavioral task

behavioral2

Sample

Red-Flaged/JaffaCakes118_30f515392358142b507a486d7ab379d2.exe

Resource

win11-20260130-en

windows11-21h2-x64

9 signatures

900 seconds

blackwood apt backdoor discovery projectwood upx

Behavioral task

behavioral3

Sample

Red-Flaged/JaffaCakes118_337dd03f1d287dcdb6471704d14aa3b6.exe

Resource

win11-20260130-en

windows11-21h2-x64

8 signatures

900 seconds

banker epoch2 discovery emotet trojan

Behavioral task

behavioral4

Sample

Red-Flaged/Jigsaw.exe

Resource

win11-20260130-en

windows11-21h2-x64

9 signatures

900 seconds

jigsaw persistence ransomware spyware stealer

Behavioral task

behavioral5

Sample

Red-Flaged/Locky.exe

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

900 seconds

discovery locky ransomware

Behavioral task

behavioral6

Sample

Red-Flaged/MuckModLoaderSetup2.1.1.exe

Resource

win11-20260130-en

windows11-21h2-x64

34 signatures

900 seconds

credential_access defense_evasion discovery execution genesis_stealer persistence privilege_escalation ransomware spyware stealer trojan

Behavioral task

behavioral7

Sample

Red-Flaged/MyDoom.A.exe

Resource

win11-20260130-en

windows11-21h2-x64

7 signatures

900 seconds

discovery mydoom upx worm

Behavioral task

behavioral8

Sample

Red-Flaged/N-W0rm.exe

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

900 seconds

downloader nworm worm

Behavioral task

behavioral9

Sample

Red-Flaged/Petya.A.exe

Resource

win11-20260130-en

windows11-21h2-x64

4 signatures

900 seconds

bootkit petya persistence ransomware

Behavioral task

behavioral10

Sample

Red-Flaged/Product Sample pdf.exe

Resource

win11-20260130-en

windows11-21h2-x64

18 signatures

900 seconds

collection discovery hawkeye keylogger persistence spyware stealer trojan

Behavioral task

behavioral11

Sample

Red-Flaged/Remcos.exe

Resource

win11-20260130-en

windows11-21h2-x64

12 signatures

900 seconds

host defense_evasion discovery remcos persistence rat trojan

Behavioral task

behavioral12

Sample

Red-Flaged/Rensenware.exe

Resource

win11-20260130-en

windows11-21h2-x64

5 signatures

900 seconds

spyware stealer

Behavioral task

behavioral13

Sample

Red-Flaged/SecuriteInfo.com.Trojan.PackedNET.3443.29781.26666.exe

Resource

win11-20260130-en

windows11-21h2-x64

23 signatures

900 seconds

collection discovery execution phantom_stealer persistence spyware stealer

Behavioral task

behavioral14

Sample

Red-Flaged/Synaptics.exe

Resource

win11-20260130-en

windows11-21h2-x64

103 signatures

900 seconds

backdoor ddns credential_access defense_evasion discovery execution asyncrat blankgrabber donutloader jigsaw mimikatz quasar redline rustme wannacry xred xworm impact infostealer installer keylogger loader miner persistence pyinstaller ransomware rat revoked_codesign spyware stealer suricata themida trojan upx worm

Behavioral task

behavioral15

Sample

Red-Flaged/Uniformitarian.exe

Resource

win11-20260130-en

windows11-21h2-x64

8 signatures

900 seconds

discovery downloader guloader

Behavioral task

behavioral16

Sample

Red-Flaged/VerifierImGui.exe

Resource

win11-20260130-en

windows11-21h2-x64

13 signatures

900 seconds

discovery execution netsupport rat

Behavioral task

behavioral17

Sample

Red-Flaged/WannaCrypt0r.exe

Resource

win11-20260130-en

windows11-21h2-x64

20 signatures

900 seconds

defense_evasion discovery execution wannacry impact persistence ransomware spyware stealer suricata worm

Behavioral task

behavioral18

Sample

Red-Flaged/WarzoneRAT.exe

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

900 seconds

discovery execution warzonerat infostealer persistence rat rezer0

Behavioral task

behavioral19

Sample

Red-Flaged/Xeno.exe

Resource

win11-20260130-en

windows11-21h2-x64

17 signatures

900 seconds

discovery execution umbral xworm persistence rat stealer trojan

Behavioral task

behavioral20

Sample

Red-Flaged/XenoUI.exe

Resource

win11-20260130-en

windows11-21h2-x64

13 signatures

900 seconds

bulka execution sheetrat persistence privilege_escalation trojan

Behavioral task

behavioral21

Sample

Red-Flaged/YnGOp-loader.exe

Resource

win11-20260130-en

windows11-21h2-x64

5 signatures

900 seconds

umbral stealer

Behavioral task

behavioral22

Sample

Red-Flaged/_13a5c1a535c161fd2724423dad1dfa6885c705713569d4ed4f2ebf900df25ed7.exe

Resource

win11-20260130-en

windows11-21h2-x64

10 signatures

900 seconds

tag_150 apt castlerat persistence spyware stealer trojan

Behavioral task

behavioral23

Sample

Red-Flaged/_1bb10490d6f13e80d874896428908f6b5758b9722b959841c369c6ddc435230e.exe

Resource

win11-20260130-en

windows11-21h2-x64

6 signatures

900 seconds

discovery castleloader installer loader suricata themida vmprotect

Behavioral task

behavioral24

Sample

Red-Flaged/_529586cbbd8586d7f33a3ea9bdd517b7ead617b4e12165106e81e4bfad859474.exe

Resource

win11-20260130-en

windows11-21h2-x64

10 signatures

900 seconds

5f3e2ed386ddeccffbb4e34c56fc2efd default discovery marsstealer raccoon stealer

Behavioral task

behavioral25

Sample

Red-Flaged/_69997b7923fe84358aa11adc4db0862577ac9336c657e771a2244f07c843816a.exe

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

900 seconds

backdoor metasploit trojan

Behavioral task

behavioral26

Sample

Red-Flaged/_aa885d2d8550a5816070d4174a504ae7b4d90e3e50b3dbce7cea17443b6b9080.exe

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

900 seconds

neuf defense_evasion discovery njrat persistence privilege_escalation trojan

Behavioral task

behavioral27

Sample

Red-Flaged/_efffbda36edcb7d4130f65a57d3966e7694172fb5db37ce48f27849d239066c7.exe

Resource

win11-20260130-en

windows11-21h2-x64

9 signatures

900 seconds

revengerat stealer trojan

Behavioral task

behavioral28

Sample

Red-Flaged/a0630e2a81775e8334ea9f8cac73cebf1b9a70507ea3347c0c2eba82c80219a6.exe

Resource

win11-20260130-en

windows11-21h2-x64

9 signatures

900 seconds

credential_access discovery blacknevas hunters_international ransomware spyware stealer

Behavioral task

behavioral29

Sample

Red-Flaged/a1730e7aaac4b7283d6ca0741b338955256965ef8804f3454decb7d00c362fea.exe

Resource

win11-20260130-en

windows11-21h2-x64

6 signatures

900 seconds

discovery cuba ransomware

Behavioral task

behavioral30

Sample

Red-Flaged/a2c01011d0a2b5ee0a51fae41109e9ccfe2aae16e6c4212addac7f757f23893b.exe

Resource

win11-20260130-en

windows11-21h2-x64

13 signatures

900 seconds

collection discovery masslogger spyware stealer

Behavioral task

behavioral31

Sample

Red-Flaged/ab036cc442800d2d71a3baa9f2d6b27e3813b9f740d7c3e7635b84e3e7a8d66a.exe

Resource

win11-20260130-en

windows11-21h2-x64

5 signatures

900 seconds

discovery duplexspyrat rat

Behavioral task

behavioral32

Sample

Red-Flaged/aca01073676a7e2003ac7af9b27b9aa54c076ea94cf4c9627828b12955261aeb.exe

Resource

win11-20260130-en

windows11-21h2-x64

19 signatures

900 seconds

defense_evasion discovery dragonforce ransomware spyware stealer

Report Analysis Logs

General

Target
Red-Flaged/N-W0rm.exe
Size 16KB
Sample260422-nlw53sdz2m
SHA256 fffe3c68f5caeea568830803b982c3e58ad3e101e0241614bf5e87d2c07e7ab4
MD5 9301efdf355b6379aef4ba98dab78718
SHA1 308ac5df7bf6fe34115522d685814a49778c5539
SHA512 6cb47cb290330ad694cd8224c518ad063db61ed530a41b3eca1f3bf5b425e7a03141e8a55f1568884fc1c7e4a2df63f82d16587ad81928bbd17081bfdba6e8f1
SSDEEP 384:c71T+Rh/1xo+/6KPN/FYdQ8bDKgJRaqcJl74CoBU:c7sxroXKxFgXbmVL4CoW
TLSH
T1F672FA0067F98625E2FE0BB85CB3431052F5E6535A32D7DBACC850EE6863FD48602BE5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

downloader nworm worm

Malware Config

Extracted

Family

nworm

Version

v0.3.8

computernewb.com:80
discord.horse:80

Mutex

35f629a5

Signatures

Family: NWorm
A TrickBot module used to propagate to vulnerable domain controllers.
worm downloader nworm

Processes

C:\Users\Admin\AppData\Local\Temp\Red-Flaged\N-W0rm.exe
"C:\Users\Admin\AppData\Local\Temp\Red-Flaged\N-W0rm.exe"
1⤵
PID:2592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2592-0-0x0000000000DA0000-0x0000000000DAA000-memory.dmp

Download

memory/2592-1-0x000000001BA20000-0x000000001BA30000-memory.dmp

Download

memory/2592-2-0x000000001BA20000-0x000000001BA30000-memory.dmp

Download