Overview
overview
10Static
static
10Xworm.rar
windows10-2004-x64
1Xworm.rar
windows11-ltsc_2024-x64
8XWorm V6.0...io.dll
windows10-2004-x64
1XWorm V6.0...io.dll
windows11-ltsc_2024-x64
1XWorm V6.0...on.dll
windows10-2004-x64
1XWorm V6.0...on.dll
windows11-ltsc_2024-x64
1XWorm V6.0...ws.dll
windows10-2004-x64
1XWorm V6.0...ws.dll
windows11-ltsc_2024-x64
1XWorm V6.0...at.dll
windows10-2004-x64
1XWorm V6.0...at.dll
windows11-ltsc_2024-x64
1XWorm V6.0...um.dll
windows10-2004-x64
1XWorm V6.0...um.dll
windows11-ltsc_2024-x64
8XWorm V6.0...rd.dll
windows10-2004-x64
1XWorm V6.0...rd.dll
windows11-ltsc_2024-x64
8XWorm V6.0...er.dll
windows10-2004-x64
1XWorm V6.0...er.dll
windows11-ltsc_2024-x64
8XWorm V6.0...er.dll
windows10-2004-x64
1XWorm V6.0...er.dll
windows11-ltsc_2024-x64
8XWorm V6.0...er.dll
windows10-2004-x64
1XWorm V6.0...er.dll
windows11-ltsc_2024-x64
8XWorm V6.0...NC.dll
windows10-2004-x64
1XWorm V6.0...NC.dll
windows11-ltsc_2024-x64
1XWorm V6.0...ry.dll
windows10-2004-x64
1XWorm V6.0...ry.dll
windows11-ltsc_2024-x64
8XWorm V6.0...ps.dll
windows10-2004-x64
1XWorm V6.0...ps.dll
windows11-ltsc_2024-x64
8XWorm V6.0...ns.dll
windows10-2004-x64
1XWorm V6.0...ns.dll
windows11-ltsc_2024-x64
8XWorm V6.0...er.dll
windows10-2004-x64
1XWorm V6.0...er.dll
windows11-ltsc_2024-x64
8XWorm V6.0...ps.dll
windows10-2004-x64
1XWorm V6.0...ps.dll
windows11-ltsc_2024-x64
8Analysis
- user interaction
yes - max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/07/2026, 04:27
Behavioral task
behavioral1
Sample
Xworm.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Xworm.rar
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
XWorm V6.0-CrackedBy@FOX/NAudio.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
XWorm V6.0-CrackedBy@FOX/NAudio.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
XWorm V6.0-CrackedBy@FOX/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
XWorm V6.0-CrackedBy@FOX/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/ActiveWindows.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/ActiveWindows.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/Chat.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/Chat.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/Chromium.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/Chromium.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/Clipboard.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/Clipboard.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/FileManager.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/FileManager.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/FilesSearcher.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/FilesSearcher.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/HBrowser.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/HBrowser.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/HVNC.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/HVNC.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/HVNCMemory.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/HVNCMemory.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/HiddenApps.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/HiddenApps.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/Informations.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/Informations.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/Keylogger.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/Keylogger.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/Maps.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
XWorm V6.0-CrackedBy@FOX/Plugins/Maps.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
General
- Target Xworm.rar
- Size 33.8MB
- Sample260708-e227labv9j
- SHA256 013d9d6ca6d999827657eb3cd1824f9771cf2020739a692509af1f54fa8e89f9
- MD5 d8fc02aab0554a4bcb47418919c9119a
- SHA1 01bced3b4910a850905eec07aadeb6c911efe512
- SHA512 6ad1eec79050a8cf0e039cd30c0a579a84f0eb52e1270023e42ceed730dfbc58d93d44fe21583de766996d3b50cbf94083b41918aa508231dc2aeb8b361c9c21
- SSDEEP 786432:5/yavAzJO7ttPSx19x2igwpVMJJ10GeOeFQcfY4sa2OB:oavIYP49x2igwgd0G7QQf4saj
- TLSH T18F7733F4E032F74891354A169A90F79E176F331552116AE6A3DB4C8E88EED3DD1EE302
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4908 7zFM.exe - Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 4908 7zFM.exe Token: 35 4908 7zFM.exe Token: SeSecurityPrivilege 4908 7zFM.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4908 7zFM.exe 4908 7zFM.exe