xworm | 72ad4bccd9c5a7addb7245efb2b9404e0b93fd638f8399f20a720b0451bdb181 | Triage™

Login
Reports

Overview

overview

Static

static

Console Ap...ion.js

windows10-2004-x64

3

Console Ap...ion.js

windows11-ltsc_2024-x64

3

Console Ap...ass.js

windows10-2004-x64

3

Console Ap...ass.js

windows11-ltsc_2024-x64

3

Console Ap...der.js

windows10-2004-x64

3

Console Ap...der.js

windows11-ltsc_2024-x64

3

Console Ap...der.js

windows10-2004-x64

3

Console Ap...der.js

windows11-ltsc_2024-x64

3

Console Ap...oop.js

windows10-2004-x64

3

Console Ap...oop.js

windows11-ltsc_2024-x64

3

Console Ap...ist.js

windows10-2004-x64

3

Console Ap...ist.js

windows11-ltsc_2024-x64

3

Console Ap...tes.py

windows10-2004-x64

3

Console Ap...tes.py

windows11-ltsc_2024-x64

3

Console Ap...sys.py

windows10-2004-x64

3

Console Ap...sys.py

windows11-ltsc_2024-x64

3

Console Ap...ons.py

windows10-2004-x64

3

Console Ap...ons.py

windows11-ltsc_2024-x64

3

Console Ap...per.py

windows10-2004-x64

3

Console Ap...per.py

windows11-ltsc_2024-x64

3

Console Ap...png.py

windows10-2004-x64

3

Console Ap...png.py

windows11-ltsc_2024-x64

3

Console Ap...ld.bat

windows10-2004-x64

3

Console Ap...ld.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Console Application2.rar
Size 12.2MB
Sample260903-ry481avzbw
SHA256 72ad4bccd9c5a7addb7245efb2b9404e0b93fd638f8399f20a720b0451bdb181
MD5 f3c8f20eb04ee5e3b408ae0fba0b6252
SHA1 7751198e6c3a384c930853514d10ec99b705ca20
SHA512 0e84519d49701659838e57c2e6cebea5a128afef89555e400fdc35b4cf0ce05bb052f4689bfe82036dbd7fcd7a432893a06fe3f05da1b37ca674e1fdd6fcdc47
SSDEEP 393216:tApwJNzAbUr6h5OcPKrk5gwosVYFLSU8M0Cu/QWrHLto+2mu:tApA3rpcF5gOQ65Cu/Q+LC+m
TLSH
T15ED633FB37502FB0928A763764306B03EDA51DDAEC76F5154E65C47EDA9902A0E2B033
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

xworm discovery execution rat trojan

Static task

static1

2 signatures

trojan rat xworm

Behavioral task

behavioral1

Sample

Console Application2/Console Application2/AntiCheat/complete_protection.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

Console Application2/Console Application2/AntiCheat/complete_protection.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Console Application2/Console Application2/AntiCheat/fortnite_hypervisor_bypass.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Console Application2/Console Application2/AntiCheat/fortnite_hypervisor_bypass.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Console Application2/Console Application2/Render/Game.render.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Console Application2/Console Application2/Render/Game.render.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Console Application2/Console Application2/Render/ImguiLoader.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Console Application2/Console Application2/Render/ImguiLoader.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

Console Application2/Console Application2/Render/Looping/ActorVisual/Cacheloop.js

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral10

Sample

Console Application2/Console Application2/Render/Looping/ActorVisual/Cacheloop.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery execution

Behavioral task

behavioral11

Sample

Console Application2/Console Application2/Render/spectatorlist/spectatorlist.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Console Application2/Console Application2/Render/spectatorlist/spectatorlist.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Console Application2/Console Application2/scripts/embed_driver_h_bytes.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

Console Application2/Console Application2/scripts/embed_driver_h_bytes.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

Console Application2/Console Application2/scripts/embed_driver_sys.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

Console Application2/Console Application2/scripts/embed_driver_sys.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

Console Application2/Console Application2/scripts/embed_rank_icons.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

Console Application2/Console Application2/scripts/embed_rank_icons.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

Console Application2/Console Application2/scripts/embed_udmapper.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

Console Application2/Console Application2/scripts/embed_udmapper.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

Console Application2/Console Application2/scripts/embed_unranked_png.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

Console Application2/Console Application2/scripts/embed_unranked_png.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

Console Application2/Console Application2/sign_after_build.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

Console Application2/Console Application2/sign_after_build.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  Console Application2/Console Application2/AntiCheat/complete_protection.hpp
- Size 6KB
- SHA256 bc879a36c0bbfcd543a8dc2f58bbed71f155718563fe3338067ddbcc3186f1e5
- MD5 1965cb0cfb696653f2eed0e3abf0d506
- SHA1 7f90b1da8c8d582e2d9237c4d400a3a27aa8e816
- SHA512 8075bf7bc606e87f99962acfce04f5f136d4face4990cafd774a864055573ba76278443ef5b5924d7f6192cc42507eaee68e92e455988208c8a1ad0d8280cf66
- SSDEEP 96:G4mAU24VhZakkbMnQSFbFoG3nP7EZxxTJ0O8Yj/buemd8R:mrgrJW4PxT9jDuemdG
- TLSH
  T122D1DD15BAEC7B5F94B2E73D9767D400F9BA24236A520E6176EEC3066F3500082A3D5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Console Application2/Console Application2/AntiCheat/fortnite_hypervisor_bypass.hpp
- Size 18KB
- SHA256 b9d5c71fd75dde1f8982fe40cb54fc718bbe0346b91044d915f303fe9cac00d8
- MD5 75f2e08855ddc9730a6808e5612ec84c
- SHA1 dfeaa8132a5ac9f83e79931936912ddcf28402ec
- SHA512 fa562dd8819b28fd5fc2286b8e9187bbd276dbd7a88798f6cb59517eed28b71e91d7d2a224b5285e04f7f6ab62c819f0b136506328d6b03f1aec9089fa72147e
- SSDEEP 192:8PzO2Bf5oNVE4MrpKS5xrOwOz3kfuK+pLnb+80c+wHr/lEOpQxCqg:L2Bf5LnrOzeWpO80dwLtM6
- TLSH
  T1D18250096998A4670C72A336DB57E022FB2BA45397451D60B9FFC3001F7909087BEFA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Console Application2/Console Application2/Render/Game.render.hpp
- Size 217KB
- SHA256 105051b1176ad2332365165397c15fbeedc82e6c4d2a12013697c19d1cd5f8b4
- MD5 106c3a448d194589b869a96abb301d8d
- SHA1 489e1d8be0dc35606fac13cc99b509023d13e254
- SHA512 25f55fbd038ff376950ef3ace5bfd439ebe0d9d147b732390f6d3d2d2dddbd36bf85e9ed1bcb46eefb69f805951cee2f35e940825c57d3d8262fac0d08bba02c
- SSDEEP 6144:v5lGR6Onb6J2OvKc/DwxPahkjfYeELLyoMTSp:v5Onc2OvKRxkZedoMTY
- TLSH
  T1C324FA8841AD39278873243CD7CBE2A83F3194736E64D760B69D726C1FC48E486A55FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Console Application2/Console Application2/Render/ImguiLoader.hpp
- Size 20KB
- SHA256 d3ee35292bff82bfaa2e261bc587b285507296d42bd367d16002a5aeed81c159
- MD5 0a4c82f310983b25365907cdf089bca1
- SHA1 9ce16d7111b2fdd3cbe4b619c2175213e3ba97aa
- SHA512 d9c451614f9c26f02502303b55378b2b92a6f8bc0e9bbabb394664d625d2225031264ee27752e598ff2c70fe51b5fc15da851e3a715a97a15985a08a0df0c5bf
- SSDEEP 192:FArM7G+LUYxOS25bPnMhs7AHF3SUsHuF887hgCzNnACOnGIOnGIzKssMx28:FlBt25bEXgNKhgCzNnACRKssc
- TLSH
  T1AA9265D91282AE138C71A9299BC2CC49EE2659F3277C2772798D615CDFF4458C270EE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Console Application2/Console Application2/Render/Looping/ActorVisual/Cacheloop.hpp
- Size 227KB
- SHA256 d1a7d458cb4ec74b602e976219fd9b1662f5ddbedc1ce9bc44f8fdff98b1faaa
- MD5 159652f640434d1e7407f1d2ea8b8d0f
- SHA1 3ec17a7ac8e14203c11e6c9c3ec960bc1d148548
- SHA512 4d692150eb95a6e1ee11f0f2df6945a3aa52521f6af5b56a0af48012c47a041418372f52a75adcd7ee19588d4711b12d14eacdf513117a6252041e45bd2ec31b
- SSDEEP 3072:xpWBYJceNUxWrX+ZvfthGd8EB8ZvXpmoTajbLmYAMm4HAejCQt6J7/6fh8mIFu:xUYxNUxWrX+ZvfthGd8EBIXCadQgaX
- TLSH
  T12934EA8903AA10054CA3915EABEF744AB73C50D39E78EA68BD5E43500FC54ACD6F4EDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral10 behavioral9
- Target
  Console Application2/Console Application2/Render/spectatorlist/spectatorlist.hpp
- Size 7KB
- SHA256 25405f42058ff125950183fd0c139147f115b2b54175e18a877ef56dc687cce8
- MD5 804cb16fa9d64ede9c81e8b5c80a4ace
- SHA1 03fadcba64bb3bd11467a50b46851de0d48653e9
- SHA512 ae34e842fe81dc00bb09deb45f7b869e310b55a753050d08a467ddea3c98b876019ee0cbfd71fdff104bb4c31a9ea0dceca4ac44392970dab5c9a5ad000f5c5b
- SSDEEP 192:4cHhYl/j6jd35jgy9Ev7aQeRIoo7SG2tKG6ooZ05RYsnSEcivD8c+wARay90CA:4WKl/j6jB9EqvQA
- TLSH
  T1F2E1F2E8406E15125C33AA3EEFD75109FB2618F30E581360F98EB1792F32455A770AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Console Application2/Console Application2/scripts/embed_driver_h_bytes.py
- Size 1KB
- SHA256 61b68f10155781821c759be2d96e0165f1ff198594a4626e2a3d43c520e44a9a
- MD5 9efbfa781648c1344a419f1586008f66
- SHA1 1335eb8fbbb1b1e44fcfcb65e9c3b6c58bd56a0a
- SHA512 3587cefdd9dbb12ac99dd3eeb2612b45ad0c6e21acbba7f294c99e77be5101e74a5045791bc1629bb233e7f5425d8b60b00db8cdeb6feb38c0aaa786aeed1c98
- TLSH
  T11921ED9A8C164C90A43BC68D4A0784B0F29487AB39B69482B68C454EDFF44DDD3A8DBC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Console Application2/Console Application2/scripts/embed_driver_sys.py
- Size 1KB
- SHA256 ce9b0a4aad9609db586aea60c7ad2450b7c741e0ad7ca54683ebc905c356977f
- MD5 a96049c8ea5aa732c21ee64ab91310d6
- SHA1 4400d49f46ec1ed0b4eb19d4a67ec8eff9ff25b8
- SHA512 bb079b8936d5ada17c77f44c1b913e700400f7c4bd01f4f5eb6f0de20955c6b203fde3a24c701bf09db79ea64bc8d70977ac8746c5a2b0e87951a12c8dc62bbb
- TLSH
  T1D521D285CD538C94A573C25C5E06C4E1F284C3B739B79451B68C854DCFB849C9398EF8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Console Application2/Console Application2/scripts/embed_rank_icons.py
- Size 5KB
- SHA256 6d7b1e9e33c4847d918da2942a4c59ce0d099f3b520d594a97fe31426ae56323
- MD5 8e2c9ecd71bda094679ec40695a9525d
- SHA1 7bf6949e9f055e568ac103524b417b1dcdfad135
- SHA512 3544a781d2bf30ab011b298bbad9420295cf5297c5e19b32becc2eacb839f2d8e4a6e3244b5f3a9f3d04d95b85fadcfd1b5f9d7228e7e36b575b0ad4467f2198
- SSDEEP 96:wQJwTj28bdGV7KMl/PrO5IO1S05rqhNGEDCpFy:wQaJcpKMc5Dl526rpFy
- TLSH
  T16EB1F197CC67E04EC276C12D42C2C461D519837BA6226B0AB47CDD2CBF7C819F359D66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Console Application2/Console Application2/scripts/embed_udmapper.py
- Size 1KB
- SHA256 5fd538723d83535da1ed3a9366e5d18155a21428abca53f8622c13d54f535d13
- MD5 e5a7b8942488f8e12590ebb132cb6ffb
- SHA1 3bc6557979601222df826dbe5b9568e7ac49fc8b
- SHA512 3b38ad0dc138258be09e4a6efef717ac6444f315766a27c1d4c30415e3b444cab652e871ccf6616a6c5b10ff37ccfd3fab0501e1899908788f14fbfb72964af6
- TLSH
  T13A214245CC1B98901573C5CC4906D4F9E2A587BB36369541B6CC868D8BF84D9939CE7C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Console Application2/Console Application2/scripts/embed_unranked_png.py
- Size 1KB
- SHA256 21e3d0463b4968601c891742483051072b64e61d737638b76e2da285420c7d26
- MD5 50bcdd09ce52bd61f5babc0bd8438ad6
- SHA1 3c171dbe1f21fc5b8785e5c775126190adf1657a
- SHA512 37b4bf29f8e06e7cbda590ab8d467957aeba0116b2a70c04cb73d55dacf888f6fec67594a5a9c1db99e9f13a66d28cb8d37281bc5cd73f14028513a4f5e8677f
- TLSH
  T1DC31DE81CC01D9909277C31C4653C9B1F14443F7B331A409769CD609FF798FAC769A28
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Console Application2/Console Application2/sign_after_build.bat
- Size 375B
- SHA256 fa0af8b2fc228a58fbb5a5c48b8f2ee0552f3599e255704a405a3a0e6056e4d9
- MD5 0d8543bbb8d8a2356da4db43c6828d55
- SHA1 891f9f6d7b27af0dbc331f19ab04b1edd946ad5c
- SHA512 4179b2d42be6308967030c171efaed1280ccb57f21c1210474eb2643e74dbef261aaec2251c7d798c5e4fac7e4cb5f35231cc997f8cd48579521dd8c81e4798c
- TLSH
  T162E0681AC1E009324813865A736A87E3E592CEA453C265AF6998425C348E90A87FFBD6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

discoveryexecution

behavioral10

discoveryexecution

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy