Overview
overview
5Static
static
3RimWorld/S...ant.js
windows10-2004-x64
3RimWorld/S...ant.js
windows11-ltsc_2024-x64
3RimWorld/S...let.js
windows10-2004-x64
3RimWorld/S...let.js
windows11-ltsc_2024-x64
3RimWorld/S...ark.js
windows10-2004-x64
3RimWorld/S...ark.js
windows11-ltsc_2024-x64
3RimWorld/S...Art.js
windows10-2004-x64
3RimWorld/S...Art.js
windows11-ltsc_2024-x64
3RimWorld/S...ive.js
windows10-2004-x64
3RimWorld/S...ive.js
windows11-ltsc_2024-x64
3RimWorld/S...ble.js
windows10-2004-x64
3RimWorld/S...ble.js
windows11-ltsc_2024-x64
3RimWorld/S...ot.vbs
windows10-2004-x64
5RimWorld/S...ot.vbs
windows11-ltsc_2024-x64
5RimWorld/S...ble.js
windows10-2004-x64
3RimWorld/S...ble.js
windows11-ltsc_2024-x64
3RimWorld/S...uip.js
windows10-2004-x64
3RimWorld/S...uip.js
windows11-ltsc_2024-x64
3RimWorld/S...oto.js
windows10-2004-x64
3RimWorld/S...oto.js
windows11-ltsc_2024-x64
3RimWorld/S...ait.js
windows10-2004-x64
3RimWorld/S...ait.js
windows11-ltsc_2024-x64
3RimWorld/S...tic.js
windows10-2004-x64
3RimWorld/S...tic.js
windows11-ltsc_2024-x64
3RimWorld/S...ill.js
windows10-2004-x64
3RimWorld/S...ill.js
windows11-ltsc_2024-x64
3RimWorld/S...ipe.js
windows10-2004-x64
3RimWorld/S...ipe.js
windows11-ltsc_2024-x64
3RimWorld/S...ell.js
windows10-2004-x64
3RimWorld/S...ell.js
windows11-ltsc_2024-x64
3RimWorld/S...ner.js
windows10-2004-x64
3RimWorld/S...ner.js
windows11-ltsc_2024-x64
3General
- Target RW_B20659247~AG.7z
- Size 495.9MB
- Sample260803-q8a78s1ekd
- SHA256 e008a740614233c2bbea2c11126e491ddaf682ccd52a1783092ed6c460abfff9
- MD5 da15695bcca63550c055e2e5f25a4a57
- SHA1 ced6136dd02436e5e11cdd36f5fb99590aa81101
- SHA512 783500044d3c868d359255a84d89000716ac1f7f7bd981b5fe0279023fef3e5240e5edb458933f8a8e0ea0bb1ba2256a73cf79ada87beb7258576ada93fbd41a
- SSDEEP 12582912:9vWksuIOWbI0jUK1ze3/t/4tAdhEuHwAIuuBYx2F:9vXsuXWbpjUKAL+uWF
- TLSH T1A4493342D94ACDC6DC2814F216BB0FC35759FDFA4BB8399AA351791CED3EB02105B42A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
RimWorld/Source/RimWorld/Thing/Plant/Plant.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
RimWorld/Source/RimWorld/Thing/Plant/Plant.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
RimWorld/Source/RimWorld/Thing/Projectile/Bullet.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
RimWorld/Source/RimWorld/Thing/Projectile/Bullet.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
RimWorld/Source/RimWorld/Thing/Projectile/Spark.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
RimWorld/Source/RimWorld/Thing/Projectile/Spark.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
RimWorld/Source/RimWorld/ThingComps/CompArt.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
RimWorld/Source/RimWorld/ThingComps/CompArt.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
RimWorld/Source/RimWorld/ThingComps/CompExplosive.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
RimWorld/Source/RimWorld/ThingComps/CompExplosive.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
RimWorld/Source/RimWorld/ThingComps/CompForbiddable.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
RimWorld/Source/RimWorld/ThingComps/CompForbiddable.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
RimWorld/Source/RimWorld/ThingComps/CompGatherSpot.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
RimWorld/Source/RimWorld/ThingComps/CompGatherSpot.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
RimWorld/Source/RimWorld/ThingComps/CompRottable.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
RimWorld/Source/RimWorld/ThingComps/CompRottable.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
RimWorld/Source/Verse/AI/JobDrivers/Basics/JobDriver_Equip.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
RimWorld/Source/Verse/AI/JobDrivers/Basics/JobDriver_Equip.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
RimWorld/Source/Verse/AI/JobDrivers/Basics/JobDriver_Goto.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
RimWorld/Source/Verse/AI/JobDrivers/Basics/JobDriver_Goto.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
RimWorld/Source/Verse/AI/JobDrivers/Basics/JobDriver_Wait.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
RimWorld/Source/Verse/AI/JobDrivers/Basics/JobDriver_Wait.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
RimWorld/Source/Verse/AI/JobDrivers/Casting/JobDriver_AttackStatic.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
RimWorld/Source/Verse/AI/JobDrivers/Casting/JobDriver_AttackStatic.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
RimWorld/Source/Verse/AI/JobDrivers/DoBill/JobDriver_DoBill.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
RimWorld/Source/Verse/AI/JobDrivers/DoBill/JobDriver_DoBill.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
RimWorld/Source/Verse/AI/JobDrivers/DoBill/Toils_Recipe.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
RimWorld/Source/Verse/AI/JobDrivers/DoBill/Toils_Recipe.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
RimWorld/Source/Verse/AI/JobDrivers/Haul/JobDriver_HaulToCell.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
RimWorld/Source/Verse/AI/JobDrivers/Haul/JobDriver_HaulToCell.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
RimWorld/Source/Verse/AI/JobDrivers/Haul/JobDriver_HaulToContainer.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
RimWorld/Source/Verse/AI/JobDrivers/Haul/JobDriver_HaulToContainer.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target RimWorld/Source/RimWorld/Thing/Plant/Plant.cs
- Size 45KB
- SHA256 a8122b1c7db800e9ff62ff17d647232155c512085a864454ee744b3b34d03848
- MD5 4d4bc4bc16ce5781c27e53eef80cac18
- SHA1 894cbde2f7a1913e3626c33ce8acbf6703b9cc7f
- SHA512 a5be1cb6a4fe2713a5ae6f794b01236c25f66629feaad1ddaf91bd1301387f62bc01b3d9c01fb9422e57e4a12c1fd841cf213d159c42f09278e560c8a81aead0
- SSDEEP 768:andaAyc4izj7Od0ExaPWYK0RN43E4Lc/G9ZdLCDbmBPhHLsWkWzUW1IWaQ9LL894:andtyWK0RN64UkaFW5+UCdfTP71
- TLSH T1B423A548B513541619B76338FF969081EB37519705F99328BC8C425B2F730289BAEFF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RimWorld/Source/RimWorld/Thing/Projectile/Bullet.cs
- Size 3KB
- SHA256 406121a0ed78334daf020a80c4ef565d0c6f7b6902a2fd01084b6cffee8dfa55
- MD5 8a191ae6b84131fd79c641b22546a259
- SHA1 9b5a042cb346c646209bf76e027b2b0915a535d4
- SHA512 cc794ee6fa51b9fdb1396c9c97322545ff8399e01c59c6f0750fab5ce2bec620ac5f970625bd38e235669e11e03a8824f7753da1d35d302aae28e93fa00a81f8
- TLSH T1F7617449F346098A2DF361F6AE3D4155C73A8BC397C982483FAF61144F760983359DAA
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RimWorld/Source/RimWorld/Thing/Projectile/Spark.cs
- Size 551B
- SHA256 79cee767ce49425d06a8cd019d01e10b031ec55f1fe7ba03f86ed00f2d8f3a3a
- MD5 54ce03b799efbab04946c85d8acab3b6
- SHA1 51b4865266fc6943d4c564a21fb69b5758268295
- SHA512 0cb7507e4eeb95c7c042c14f0e000d99600493156966cd248d46f2868f915c207da81ba08ea60d979fede8e389f3860f35726bd3160dc2da0a2cc04d8d0bc438
- TLSH T170F08B4D36C24BDE1DA114A20E38C5759371070643C185207DBEA10CEB2A0607261EEB
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RimWorld/Source/RimWorld/ThingComps/CompArt.cs
- Size 5KB
- SHA256 852fd0b72a7bbb48078cb5d1abd5448b191ff7559f641259c18a57f9d093fe4d
- MD5 6db14d75a5e7e7918602e19908c9f3f8
- SHA1 a6be70962f9e19aa90c5924219b86f6b83e0d6f5
- SHA512 2838dbd3fc0fbe94997163dbddfdf06fea65968d6d3a6bf1ffe7d1f2013f5cf9f5194bb3014c989cae2628fdab61dcfaa65f2c2cb2618901f75b85aa8edc0a89
- SSDEEP 96:Jo4h2nwdgP4Q9m0/kXpAR6reN67PDaEcG5zI0:9Uh4X0/gaor26jcm
- TLSH T181B1225C770B8429A76042618A3A55D2FD7EC947477D80E5BCCE116ABF71018C2B8EE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RimWorld/Source/RimWorld/ThingComps/CompExplosive.cs
- Size 13KB
- SHA256 d6b13bb2d7ffa82524d0915636b4eae17a5269119f7860eb0b8c2c0ac4f410b3
- MD5 49434580a3ed62e3d6a266ed93bf83dc
- SHA1 4bbebf0dd0f0f34896ce68a568908c297d29bc33
- SHA512 f886066f23e516d4e6946971768ddbcf6869a94ccd8ce6fc4477369b8295fb87acc419ecbcb9126a9307ff220324ab681ba4aea417eb0b774a9ce6b921afca4b
- SSDEEP 384:d/T67ZrAVWJphu+SBjWXYuB5FJTFJcBGmUplUnt1uiACCz:R67XrXd5hJcBG9plZ
- TLSH T12F523FACB662013AE83363B8EB5741D4FF23055381D68325FADF849E1F3111192A5F79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RimWorld/Source/RimWorld/ThingComps/CompForbiddable.cs
- Size 11KB
- SHA256 0d52d1f0f9015be6fe188ef549b94a05206630fb130d43d5cf4fc81fb9af1ac1
- MD5 273d9bdcee883356336e9252ccf10c54
- SHA1 a8382df8a99c25f2e89640c5256ce802709723b6
- SHA512 429e3ac2266212ab912b9b0506d0f935ee5e0918e36442bb1621d082deddb77b8d77a6c64848aa8f94246e04eb6643e28e248e38278bae3245a5bb38f637b6d5
- SSDEEP 192:VoG6NiD0DaLcjYKd8oIkwmbj6jqLQ74ioyDM/PBqPP7u3T6s9QTW5iY:VodNHZas5/PBqBWD
- TLSH T1F6321344754E543D7BE7531446354A41FF6FCB22027B02E4FA9D866E2B3423882B8EBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RimWorld/Source/RimWorld/ThingComps/CompGatherSpot.cs
- Size 2KB
- SHA256 96b9d07eab4fd40ca22cd4cdaf8e64e30d4fa918dfb27f7b4fbc3e43bedde28d
- MD5 61b64762d9bd6e61ca1cd24a65fc62b4
- SHA1 1a47b4ec7a6dc10c558d11be50a690c27fd10482
- SHA512 a1ba684780d6e8d0261383f86a84cf7cbb886cb23705c776725cf9f1f2d1cf80f7c4c3d4441b0c1a40aac08a51200585c310e895d3f2502726a3bf1cadd42c88
- TLSH T1CF41DD4AB78BA33E56B2134F4E72C9C23D6EB2CA4DA902D175CD18218A17494D1B4CFF
- MD5 SHA1 SHA512 TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target RimWorld/Source/RimWorld/ThingComps/CompRottable.cs
- Size 8KB
- SHA256 0c707429af46b578c080921ab03cd1350ee2a55438bb51e23666fa7a689b7243
- MD5 ef89b1afa1783e17cd8b204331e866e4
- SHA1 88056d88d0fa8bd209115986efe784c9adf846ae
- SHA512 62f00139c0731ff8d364e714b99804690219947555d6a67346a931080357684b989979af9b864bc95d7c23d2937a096e3ddaf83f0f87b862737a6761c689d26a
- SSDEEP 192:d6BnJZd5am8AWrlecelT1HD2r5RkJhSXui:dWJZdV8AWrlecelZHD2r5R6hSXui
- TLSH T1A202B4F4B786613D8A651390BB384486FF2F900746BA92F4744C861A9F284584BBDFF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RimWorld/Source/Verse/AI/JobDrivers/Basics/JobDriver_Equip.cs
- Size 4KB
- SHA256 3cc7d296d8de5b3db8d77bdad4abee8800b5ec9aa968479376fdf59c6af2b3dd
- MD5 fe4aaac02424b2936aed3643e10ac18c
- SHA1 fdfa904b169b080cd305a795eca9a166bd28ff3a
- SHA512 0939333a72ce27f056139e58b5086daf9db2952fc065bf1c2b4a22c22019e6deb3bd4d2228bac2e86150a5fb68664b79fa94d69deb52ea1df4892d2dc7145038
- SSDEEP 96:C4siFWAumlcGbRTJywr4GQyneMvHPihc88CcHU:VRWgJyynNRxB0
- TLSH T158A174E57283A0DEA53193A1EF850940EF6985D30A67C224BFCE4B502F704D185BDDEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RimWorld/Source/Verse/AI/JobDrivers/Basics/JobDriver_Goto.cs
- Size 3KB
- SHA256 522776811745b473b505061351825a969bf6645384218c176cdea176ba3f4b61
- MD5 12e30336dff1509440af3d36c7263441
- SHA1 cee9d666e06ec0958b7e3a02abf503125aa435ae
- SHA512 d358741a742352aa05e7c651363c3d0937a23aac6846a9e030f70798336b82785d1899f28a682b4a048cc1ab765e8b437cfe283c80ebde60dbf4a05ab0f3ef37
- TLSH T1EB8186C8220212790D77652A7BC60046FF6805E38B65CB183FDCA3912FB2094A677FED
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target RimWorld/Source/Verse/AI/JobDrivers/Basics/JobDriver_Wait.cs
- Size 6KB
- SHA256 af36a0560a48c9f5c639653b6bac37c8c70ac7c3c5093c0df5bf3d3b61fd7081
- MD5 5866c43429487210e7134819b059244c
- SHA1 f847d4b5064fe975772d8f1f464a8933ad2b79e4
- SHA512 f7c34379f05cbaa88872cf6c2149ec32b9d2131a8f53f2709466f6e52aad7cc03fe6238d982640a69a52f1c7563dbca8bd2e4f47f3628e67dd2291f0e50ff13d
- SSDEEP 96:C4kwXKlI1vbFIUJhQj4vSjQeyTIo/GUDakFJmIZ2mfl+AVqeb0YBF/QBK6JXEZ9g:VUI9bBh4WSjVyTIoGUFA38qegiISZ5A
- TLSH T1BEE1A7D933CF11DE0CB151158BF64049DFBEDA63036682A479CE9A846F3941482E9DFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RimWorld/Source/Verse/AI/JobDrivers/Casting/JobDriver_AttackStatic.cs
- Size 4KB
- SHA256 9524e9530d8a4c533f7ddd15672a6ceadb71805902109dc4232049637a7488df
- MD5 8c13d2279234ad32224ab2ca5fa782d6
- SHA1 9340edbf07aff142d4f8df7593c45aa798b831af
- SHA512 ac170cb7990622de8653e7fc3347d750811c5400b2289d7f3a917717aa021a64ab0ac4532a384df816f16b25f1887201ab237228df72402ac057381c7643e200
- SSDEEP 96:C4SwJlcXlJNEp/WAX3llDarM6RbJNpCerx7+:VS76/WAHXDarMO1DG
- TLSH T183915196770F50CF0DF5104882FA004ADE9DC4E70716D298BEEF2A949FB9011A669CBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RimWorld/Source/Verse/AI/JobDrivers/DoBill/JobDriver_DoBill.cs
- Size 11KB
- SHA256 58b3762e7cf53ce905184858d69272c05a7e07960212b3acc1b2acfd7dfaac5c
- MD5 e290de5fc3beb26eff9f23a6c89a8a8e
- SHA1 7618f30f55d0481b163e4fd98bacd0492d5766f4
- SHA512 ce4fd858e1d617ba4b940fd036edc33ec941d595d0b6bbda0882bebb11b09d36ec862f63c33b936c0d2fe8737346ffacb18923a2b45455990436da09e976fa4f
- SSDEEP 192:SpbeKL8mq66R/ZgpXCHF+rXMgwmDUM6J6dx4hDOQyGL3rL81dVj:SpaTmJ6xZuSHF+bMgwmghJ6QyGL3Gdd
- TLSH T1CA3273C172CF71F9AF789454A9361614FF2C94E79E1A8150FE4E531CAF700509AB8C79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RimWorld/Source/Verse/AI/JobDrivers/DoBill/Toils_Recipe.cs
- Size 18KB
- SHA256 cc665753414448630f914849d8ef0af8f486cc21697d16581db817cc52d3bdf4
- MD5 80876bfce47bd6481cde94ea6c5e325e
- SHA1 fecb218f5dda1305e628e251ce82770cbfec3b4c
- SHA512 c79f49791fd444f663defe33fa2971b3ec4e6d0115b6f9ce7b1c43e93179b34db61084b39ef8f42e4b7f701fa090f7b5ec275c80c0be5fb9aa463179ee3affd3
- SSDEEP 384:SMk0wmeUo8e9EoQi7h7McP4DwhJ7Fj6UJEEu+MioN/o:Rk0wmeUo8e9Y0h7FwDGJ7F7EbnNg
- TLSH T185925449F36F10ADABE49428EE3B0499EF1CC066D72A90A0F44F471DAF747A4537C898
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RimWorld/Source/Verse/AI/JobDrivers/Haul/JobDriver_HaulToCell.cs
- Size 6KB
- SHA256 7fa7db02fa00b3619a6959faaac6ab5bd22e355aa918036a17b38d510e7fc775
- MD5 dd0fdea928782e0e417275d6c8146896
- SHA1 88755e4be8432a59a7d147065395a0111ed13154
- SHA512 ec7dbbdab46ac611cc52c99d084b40701b2a31c329e246d4c97835dd3e09a38b43bd94d4f51fd7002fbde290daf43c7df568d71b414bb00d4d9730c9412831aa
- SSDEEP 96:C469w9YdFvT08bpimws5KG+Qx0b/FTRQ6uZ8X:VqVdFVMAKG5xgFTj1
- TLSH T1F5E13086608372A6AFF7515CDF410184EF190A678B6D8224FF8F63466F380548ABCDAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target RimWorld/Source/Verse/AI/JobDrivers/Haul/JobDriver_HaulToContainer.cs
- Size 9KB
- SHA256 6e177cb9f0a83bb170fa600ea8350e5a2da9bd1d484c1c26c810d677d798f33c
- MD5 d605b607d3d642b7d82987c6133f178d
- SHA1 bbc32a38ac20cdbd13e3951160308570bf09025d
- SHA512 58f83293ba4b6d2e60511d885a3fb5810355c9e8dabc102a52b2f08d12e7361c5d16b3ec9154e6e43a4ecff7eda15b4624d436f32bc4296faa21a0be590c71d3
- SSDEEP 192:VUTJGshrUGI1SW4rThBvsiKu6/oRFZDB23u:VUtNhOMLHvq3/o3ZDB2+
- TLSH T1AA127214764324B66FB2136D9E674901EF194903CB1E8664BECFD201AFF0496AA78DE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10