Overview
overview
8Static
static
5WorldInsta...32.dll
windows11-ltsc_2024-x64
8WorldInsta...on.dll
windows11-ltsc_2024-x64
1WorldInsta...eb.exe
windows11-ltsc_2024-x64
4WorldInsta...64.exe
windows11-ltsc_2024-x64
4WorldInsta...64.exe
windows11-ltsc_2024-x64
6WorldInsta...64.exe
windows11-ltsc_2024-x64
4WorldInsta...er.exe
windows11-ltsc_2024-x64
7Analysis
- max time kernel
899s - max time network
588s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/07/2026, 02:50
Static task
static1
Behavioral task
behavioral1
Sample
WorldInstaller/Microsoft.Win32.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral2
Sample
WorldInstaller/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
WorldInstaller/Prerequisites/NDP481-Web.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
WorldInstaller/Prerequisites/VC_redist.x64.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
WorldInstaller/Prerequisites/python-3.13.7-amd64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
WorldInstaller/Prerequisites/windowsdesktop-runtime-9.0.11-win-x64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
WorldInstaller/WorldInstaller.exe
Resource
win11ltsc2024-20260709-en
General
- Target WorldInstaller/Newtonsoft.Json.dll
- Size 704KB
- Sample260724-dbzhcafm5x
- SHA256 f0c07af0e84d4dd4da4bd7823ba4535bc0481b3bf623ed40b659b68147a6bb75
- MD5 24704261e701b49b51e40c1292ed149e
- SHA1 db8ce5e0b7d8c14920bc9c4eebe51bdf706e3fc6
- SHA512 8ef6a6196044862a9d8d53c6a88e68d9591edf244385bc4888cb9c16c942eeb4a1689c49245d6cf80d619e95f0745898513ed2b67a6fc4c65fbc06b872f72184
- SSDEEP 12288:65RsO50fsVuW3icGomHAQ/DUHIdGFRrDTOAPKfhUUNSUmTIcvABXyoJl8fCfB5qm:om2VuaOKdKSUNz0IpBXyov8fC3
- TLSH T178E45B2177FC8E16D9EF2375B430D9181BF1F956A2BAE78FA504D9A51C837918C203A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\WorldInstaller\Newtonsoft.Json.dll,#11⤵PID:5172
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:3028
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5000