Overview
overview
7Static
static
3Legendary.exe
windows10-2004-x64
7Legendary.exe
windows11-ltsc_2024-x64
7NexPY.exe
windows10-2004-x64
7NexPY.exe
windows11-ltsc_2024-x64
7nexpy.dll
windows10-2004-x64
1nexpy.dll
windows11-ltsc_2024-x64
1plugins/Pl...ate.py
windows10-2004-x64
3plugins/Pl...ate.py
windows11-ltsc_2024-x64
3plugins/__...11.pyc
windows10-2004-x64
3plugins/__...11.pyc
windows11-ltsc_2024-x64
3plugins/__...11.pyc
windows10-2004-x64
3plugins/__...11.pyc
windows11-ltsc_2024-x64
3plugins/__...11.pyc
windows10-2004-x64
3plugins/__...11.pyc
windows11-ltsc_2024-x64
3plugins/__...11.pyc
windows10-2004-x64
3plugins/__...11.pyc
windows11-ltsc_2024-x64
3plugins/__...11.pyc
windows10-2004-x64
3plugins/__...11.pyc
windows11-ltsc_2024-x64
3plugins/__...11.pyc
windows10-2004-x64
3plugins/__...11.pyc
windows11-ltsc_2024-x64
3plugins/__...11.pyc
windows10-2004-x64
3plugins/__...11.pyc
windows11-ltsc_2024-x64
3plugins/__...11.pyc
windows10-2004-x64
3plugins/__...11.pyc
windows11-ltsc_2024-x64
3plugins/__...11.pyc
windows10-2004-x64
3plugins/__...11.pyc
windows11-ltsc_2024-x64
3plugins/__...11.pyc
windows10-2004-x64
3plugins/__...11.pyc
windows11-ltsc_2024-x64
3plugins/__...11.pyc
windows10-2004-x64
3plugins/__...11.pyc
windows11-ltsc_2024-x64
3plugins/__...11.pyc
windows10-2004-x64
3plugins/__...11.pyc
windows11-ltsc_2024-x64
3General
- Target NexPY (1).zip
- Size 601.4MB
- Sample260824-1d8v5aztes
- SHA256 85f4bfa1c9e5a83551a6bbc3467d77f03e1ebde22fdcd39619fac0b0eb9ea174
- MD5 18fc656c21b78885e692e5ed22219658
- SHA1 8c086a2ffc0a7d5a36c42c88fbd95ba7b615f0e2
- SHA512 0a49078cf09f52cd3aa2c15983292421d81b17995dff5d100e736a0b0879cea2e0b120ebafcbfeff641162c56dd7ee5ad69559a8d0aa325430797d0506604033
- SSDEEP 12582912:WtM380bUJrfKBeb6qtzriJ0co+bOr4xRJAFUQMvpPVwyN:WtC49fKBJqJ7IOrDFjkJ
- TLSH T1F66933DB81B248632A66277F1FE32D34E53268BEF6F683018F6A53158133394DD71A94
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Legendary.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Legendary.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
NexPY.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
NexPY.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
nexpy.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
nexpy.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
plugins/Plugin_Tutorial/plugin_template.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
plugins/Plugin_Tutorial/plugin_template.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
plugins/__pycache__/TeammateAwareDominance.cpython-311.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
plugins/__pycache__/TeammateAwareDominance.cpython-311.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
plugins/__pycache__/Vortex2v2Defense.cpython-311.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
plugins/__pycache__/Vortex2v2Defense.cpython-311.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
plugins/__pycache__/VortexBoostPathing.cpython-311.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
plugins/__pycache__/VortexBoostPathing.cpython-311.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
plugins/__pycache__/VortexSmartPositioning.cpython-311.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
plugins/__pycache__/VortexSmartPositioning.cpython-311.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
plugins/__pycache__/new_vortex_ice_hybrid.cpython-311.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
plugins/__pycache__/new_vortex_ice_hybrid.cpython-311.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
plugins/__pycache__/plugin.cpython-311.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
plugins/__pycache__/plugin.cpython-311.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
plugins/__pycache__/spam_jump.cpython-311.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
plugins/__pycache__/spam_jump.cpython-311.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
plugins/__pycache__/turbo_mode.cpython-311.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
plugins/__pycache__/turbo_mode.cpython-311.pyc
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
plugins/__pycache__/vortex_anti_camp.cpython-311.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
plugins/__pycache__/vortex_anti_camp.cpython-311.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
plugins/__pycache__/vortex_corner_adapter.cpython-311.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
plugins/__pycache__/vortex_corner_adapter.cpython-311.pyc
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
plugins/__pycache__/vortex_defensive_integrator.cpython-311.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
plugins/__pycache__/vortex_defensive_integrator.cpython-311.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
plugins/__pycache__/vortex_kickoff_strategy.cpython-311.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
plugins/__pycache__/vortex_kickoff_strategy.cpython-311.pyc
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Legendary.exe
- Size 8.1MB
- SHA256 01ea22ea51749f46a0019657f64fc0d34429fb7cbf9b590c0848c0e0bd9c1f07
- MD5 756371a5e646e52ec556fe5c869c5558
- SHA1 11c5a92bc2dc56a07c807c7bca788ba3bc04936a
- SHA512 f74f1b4e91fdbfa6f2a899158c6efffd85181f578f5b46f9b1e07497a9ca990accc5f27e3320e864aad2f003f74804facb78adf3b310fa38da0efbbef8d4617b
- SSDEEP 196608:b5QaoaQQgSfeaICteEroXx7IP0oTcMsABqb6delGEwVS6g3u:9QaoaQQReaInEroXOMogFABqbwe4fVSu
- TLSH T18D8633157FA80DD1D275A4318454122AE47FB432C7E8B56F472C8B368FAB3A1FE6B250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target NexPY.exe
- Size 578.7MB
- SHA256 97343c6f2bfc723281d8556e1b9cceaf58f8ab3f3dfa5c6c117e47abbf242165
- MD5 0a84d12e4d41142b5b8fee0c234397b1
- SHA1 4331c0ccdc02ef52c8f4d94812aef6c31d9573c2
- SHA512 8d3aea14e24d1e2b55298e9761cd1cfc8d19e1ea59f72d507a526116c5222d9919a711af0d47046d2be672873ee520d6103738ff93fc723eef40511d26c2ed54
- SSDEEP 12582912:XWx1auela/y9rBejKLaHyr1dEB2JHucTLQPaknE8Qe:XWxov9r4KpamHkPRn
- TLSH T17759338644D14472A96B2BB91FF32E78F9329D7DF1F243228F66A1165037350DEB1BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target nexpy.dll
- Size 16.3MB
- SHA256 7ce16a7658e7267b25662b43df43950bd52fbe3b0b4aa17202a375aaca20180d
- MD5 70c386743c18c1b6f112cbf30129e28c
- SHA1 f649e6c849ac9dc09dd97ec34aebea49c2850b43
- SHA512 9696bf9e52beb9c0dbd7dcf18757ec5ab1d2da886738b02524ab1ec8c41a287caf1ac41c8be1fb36236d9979561f166855efefc008389f74b911ca10fbd7dddd
- SSDEEP 196608:0ec5g/iOAarmLWNDhMAH+N4pfaSLKjhwOSBT8qGtxFztJP5FA7rX+hnYMJD0CdEk:5cGZAKD+yEjemZHVt58Wzv
- TLSH T10A0723C3A3FE93ADD0434739694602C2B9C4754BD9EB8A1836CE0C07B955D6A42CBB77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target plugins/Plugin_Tutorial/plugin_template.py
- Size 7KB
- SHA256 ca5481160ecc5cf14587f151d4396dc2f1403f5af5055a18a3c23955eb0dc44b
- MD5 29b118746a354b8c7ed0fcf25b6c47e3
- SHA1 3ef83b77c7a9bdc344cd02a469501a7d04ef3c8f
- SHA512 5aae2e2af3c51ea856de2001ff98da6d31f5c90363acb6ae75335345395184e416068e63d607933ae3895a23beabbb9d874eaf03485f6ca7ec38c4d40088ac48
- SSDEEP 192:6Aw2fnGcINNpty86BPWmSC8jTfjHujVaHV:j8yZBPWNFTfjHujVaHV
- TLSH T1FDE1A433BE46D92A1071C0AE236E96E2F35E539F6A2C71A1749C20101F71396D0FED8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/__pycache__/TeammateAwareDominance.cpython-311.pyc
- Size 9KB
- SHA256 140f86bdca592e81aa300dd91f7a28db1a6aa2d4feaa67b026955326d6c16db4
- MD5 63d5e792c9e2a2f409e5cc6d6637b4b9
- SHA1 c568a840ceaabe7a5184771a35015e2fcc5c1583
- SHA512 71d462694ff9b759b6ee11436908f009e6d0cec0cae2e551ed766ff6656bf0b4e33e5b4faffc698e90a58927cf497f9c4967437d42cd63c6ce6b116456576606
- SSDEEP 192:OqQLjV1QM/B3GQ3CZOthTa0cahW6mVr63H+7:GjV1QbOCZOtdfINqH+7
- TLSH T1AA22A8449B83D47EF8A4F2BA9425378AB36089E5B241C7163AFF94366FC75D42C490EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/__pycache__/Vortex2v2Defense.cpython-311.pyc
- Size 10KB
- SHA256 4979865f23a94b661469006eb255eb7a39d81e8d9f7ad9da8332d713c5262245
- MD5 4addfc847fb49cea67c34af7ab0cf24d
- SHA1 1330f87a99617faf0e25561cbda394193c6458b2
- SHA512 c331d14ac75f807a0045941180a65dc2dabba4b1c527fe1fd86a410f12fac6952d5f60eae8e8f92a8ef24a2fe603b2eaa7de457f3d292ca796bbf7a1e326fd41
- SSDEEP 192:I/8LJRqZk97j9gfP87Ubqd/drq00ddSoDflijnX67op3Qw4d1C+w:i8RqI+fP8746Pd0lirK4J4ddw
- TLSH T18A22E985A883C43FFC60F27B842A275AB77546F8B380C313367F9025AE47A585E865DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/__pycache__/VortexBoostPathing.cpython-311.pyc
- Size 10KB
- SHA256 eee6ee9a683a16d842452d13e3d6b31d45e782dc59e0be3439f277bca8307deb
- MD5 ba22f2570e236a7207f8840154778c39
- SHA1 3968015f3780b500f68300b19152844904f2e1ac
- SHA512 5b89d0cf9bc49de1c71fac8864b96bca83af380e63d63af10eae5e6e95b0adcb9f54234e5eae49ec4dfc69321a9d4787cd95c2b19936ba634e610cee2dde5208
- SSDEEP 96:6zAmXa23VWfw1teg9/0esp+2YpCauody0fh4ZZ15uauVTlJBwuk3seBkh:g9a0Wfw1pNsp+34au10fh4fATlst37o
- TLSH T1272295D1F882D87AFC64F2BB80222B9973504DF1B641C7273A7FC42A6F4B59469251DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/__pycache__/VortexSmartPositioning.cpython-311.pyc
- Size 11KB
- SHA256 598ebf1c09119bed1a54d7deb384dc482f113bf41f2f909e1e65b291a0518314
- MD5 49d4e6b6ab71236cb821d98dcdd00ada
- SHA1 4519e116eea36f4644ce3d3d42481707d579a3bf
- SHA512 8debf064fc8318ff4e5e7a57ce29645f89331a269d1c64e0e3e9b2e75384b5757b6a162a67cfd74f8f8a8b73056498baca4db8c9f7306a3d765043509c91e866
- SSDEEP 192:Kkfuxzekiuu4ucuuuqiXzauvOwrChJoJz0TzpE3Cpq:YzelzGkChmzi+j
- TLSH T14732C6D1D983C5BBFD00F1B645263B5EB3A04AF6B2818323397FD07A2F8B58818154E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/__pycache__/new_vortex_ice_hybrid.cpython-311.pyc
- Size 4KB
- SHA256 279578ed13c87e92b9ea4728b013dd7cddd9f4f19f58bf4fb5f6b7fc050a20b4
- MD5 4730a937e1fc20422fd78423fd95eb00
- SHA1 f06adc39c19f21c883ead92a369fbb34c29c8798
- SHA512 04ab851084f8ce9edbbbc57cbf2fe61075373bbacdb089914514f203d8bd018401c0e82eeaa2ef1ad60764f4dba56bc914fc00e6d426282790d95d82992d620a
- SSDEEP 48:BcHADFgEgz4wqDhg26L+u5d8XjMJ3/hv50B5llbXQFEJ3/LhAF3ONvv+MMbK:Bc+pXf+26L+uESSbXj9E34OY
- TLSH T130A1A4654A438F38F968B1F689663AC1B7F447F1B060CB1235BF686C7F5B12818861EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/__pycache__/plugin.cpython-311.pyc
- Size 11KB
- SHA256 0834162a1946c9e31565577decd512c91e2e574cf267cb0b3d258fb16b4a0712
- MD5 fb946fc95547bbd7a8df46f2e34ac494
- SHA1 435f9e34f164cc1ce9403306faace1c600b09103
- SHA512 d317eeaa2b0ee8e1eb9eea0a4d2081ba202e7a1cf74a450261f6661a6c957c6279d174d2c5f020396528a086778c0e024b1f7692f72f9e0a32f2d3cbe9b684b3
- SSDEEP 192:vbP+j8AE838mqpiRtSl8Oc7ZU/62r7RizFWsoHZM3oqXt9:viQAEw8mqg2+O5C2YFWso5IoqXt9
- TLSH T11542E8816953C939FC1AF2B1842A3754B3694EF5B600C7023AFF502E2F5B65DA9194EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/__pycache__/spam_jump.cpython-311.pyc
- Size 2KB
- SHA256 4eb3c45c04f58449b2f28cad4213be387d4d79929bcb4e87a9ffa78215dcb3f6
- MD5 c4862d0b8ef8117927ffd2534e8c8b59
- SHA1 f0d6bcbc98d54518dd7b8c2995f81deccbaf2690
- SHA512 160baf155f06cf79236214c0141c2d3a4b115bb2569115df0707b16c128ad1446fcb6bb29d1ccf20aec1d3894ba2617975160dbd0b618e0c680779447559864c
- TLSH T18B41A8C8BE40E73AE47CF1F8442F24C67AE8C6F178E2CA6339284669BE1B1D415564CC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target plugins/__pycache__/turbo_mode.cpython-311.pyc
- Size 1KB
- SHA256 e011f8debc6448b5323a72b0637302f85aa28825eac84d294ad7422e5314ed7a
- MD5 e6b194e71256b1cd3b0c1233a47f20e3
- SHA1 66040276f59019b6f5e02bd72e8ced5a1795435c
- SHA512 8e7e178d6e05a3ed616fb5fdea0677c795552b0f1fe3598edb05930506c09093caa3169169108f9cac92c4eb36b24a4d422ca7ee4e07ad34a116c2ed319c03a7
- TLSH T1F54195846E60FB39E9B8B0FEC417258971A89BF92CD5EA733A1C10B47E5B095042B4C9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target plugins/__pycache__/vortex_anti_camp.cpython-311.pyc
- Size 7KB
- SHA256 219dcf1bdb7b43fdf072ca377a1d71f552d0250c04747c0ffb4d0ddea89261b7
- MD5 72392b49aacd7ae5ddc835d17927a5e2
- SHA1 11a60209746fb53c64c72554c8944571d904b8b6
- SHA512 bff749763b2306d650db746206eb2ce0a8433903d8d1f47eb420fdd6986fd285f0989c9f9bd52db0ad5ae898bf83988af4500982467a747850fa3555dcc85227
- SSDEEP 96:8XGJUzSfmayY+DBf7YFv0ek2BBgcR0twstFxF3PbOJ:8zqWf0FvnBgcRaX3Pe
- TLSH T10FF184921843E879FC69B1F680673A8BB77488F47552C72339BFD4295F4BA5018202ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/__pycache__/vortex_corner_adapter.cpython-311.pyc
- Size 11KB
- SHA256 bd36a78e2d489189213d1f89e915aa111ee94041880bd011765bd13b2d61afe0
- MD5 52e022b7f3e1a3506325b450db21a1c5
- SHA1 8803eab1ab8ffb77258adea126ddb1886eb82be4
- SHA512 288e083afc5ebea3bd279f307332d6b79c9d8e55ad34503f2ebc5a563cf62e9f673637a2d248e959015b09c0a17a142dae94d05ad69c706bbf36de4d84a5012f
- SSDEEP 192:IFDN46M11AitFYK3iA9HtMcN77NsAoFtqtGvdC39r:85I7SA9NbNsVFtqz9r
- TLSH T19C32B48668429D79F835B2B6C0B63A52F3798DF9B120C72335BFD0296F4788469316DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/__pycache__/vortex_defensive_integrator.cpython-311.pyc
- Size 8KB
- SHA256 e748c614b3161a56ddfa280c7c642a698a4bbdc4bfc0f894bb60f604768d6e8e
- MD5 2981e68ff53adc38b64bad618bc3050b
- SHA1 83230cda35b074cb13749c34bda1629d389fa264
- SHA512 f4811661fe78480baa2946d49121a5fab551986a7f8c5c2eb4440490bf1bba5b06dff3e9ce668c74b657b0fb4d1705bfbb897be4e49db21d038cea188ee2d1af
- SSDEEP 96:v9+URPEFNl/Aw+oxrhu/a/jWHbBPPRW2DZiWEs4a6MzWo+GZ2e/2VuYOZC7YalZp:v9BERoBP8ZHHiUe+8kTlk3X9Te
- TLSH T1CE02A4816883D87EFC25F6B984A32A56B77585F1B201C713317FC4769F4BA44A8116EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target plugins/__pycache__/vortex_kickoff_strategy.cpython-311.pyc
- Size 10KB
- SHA256 56bf2a60e064a285f542b3e39af09a0061779af8fd52c3b010234087497507b7
- MD5 cced72d40362552d5b60c7326a1e4cf1
- SHA1 0126d6c7f9f80df14b422572c74c7c86a9e76234
- SHA512 1086251287217afe590f144b907f7ac7f094c19260a57368cb46af2255d3d4c9aeb116ee373270fd0ecc73bb084397e03ca1bfff944b613007e2296d512c8573
- SSDEEP 192:1SXlfghq9seWPueOlY5fSRq5ckqtE/iScumlnG843K:gXl6q9seWPueDfSRq5jqe/iScumJG80K
- TLSH T1DF32A7816A81DA2EFC64F1B6C8A72B46B37189F4B510D763317F80366F4BA585C912EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10