General
-
Target
34c36c75c6d89b31460963832d2fc0ac50fa2e6c291b94d7e25aec245d0d43af
-
Size
16KB
-
Sample
220619-ywghgsahhl
-
MD5
18d1e4e8df0412c61ff58f0b8ae6d95e
-
SHA1
35bc59db6c43aa866b812c8bb2e9b8038d5fe2fc
-
SHA256
34c36c75c6d89b31460963832d2fc0ac50fa2e6c291b94d7e25aec245d0d43af
-
SHA512
ad0309210430fb4085007f2b62a65594cf3becc437851c9bd863f90887c9bed8acc12c7e9449c6b1b476cda586ea62500d8f24e581eff8225b9ebab45b711c96
-
SSDEEP
384:1KBvkPHxH19GTXjdhYguujYcV6AUwJFZb:1YeRV9AhJfYcV6Dw9b
Static task
static1
Behavioral task
behavioral1
Sample
34c36c75c6d89b31460963832d2fc0ac50fa2e6c291b94d7e25aec245d0d43af.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
34c36c75c6d89b31460963832d2fc0ac50fa2e6c291b94d7e25aec245d0d43af.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
loaderbot
http://user79869.7ci.ru/cmd.php
Targets
-
-
Target
34c36c75c6d89b31460963832d2fc0ac50fa2e6c291b94d7e25aec245d0d43af
-
Size
16KB
-
MD5
18d1e4e8df0412c61ff58f0b8ae6d95e
-
SHA1
35bc59db6c43aa866b812c8bb2e9b8038d5fe2fc
-
SHA256
34c36c75c6d89b31460963832d2fc0ac50fa2e6c291b94d7e25aec245d0d43af
-
SHA512
ad0309210430fb4085007f2b62a65594cf3becc437851c9bd863f90887c9bed8acc12c7e9449c6b1b476cda586ea62500d8f24e581eff8225b9ebab45b711c96
-
SSDEEP
384:1KBvkPHxH19GTXjdhYguujYcV6AUwJFZb:1YeRV9AhJfYcV6Dw9b
Score10/10-
LoaderBot executable
-
Drops startup file
-
Adds Run key to start application
-