Static task
static1
Behavioral task
behavioral1
Sample
Multibot by k1yTheSecond.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Multibot by k1yTheSecond.exe
Resource
win10v2004-20221111-en
General
-
Target
9ffbe1fa209891166e5737e3e9ed4f0c1dfe93ef8ff23cc25f83bdb822cdf8b7
-
Size
51KB
-
MD5
ad7e000e931ae2834eac34fba37d6353
-
SHA1
93ae879ba410f374325eecc6009bcb6531cc7574
-
SHA256
9ffbe1fa209891166e5737e3e9ed4f0c1dfe93ef8ff23cc25f83bdb822cdf8b7
-
SHA512
175faf5334cd0cd514e41db32aabd88abf1611150efe6cf94e13e2f9cf33b4005393f049c7c786d5a7119d4a87f1ecd8cbb030399a065bb536836f30b6d2d5c2
-
SSDEEP
1536:PQ6+p4DgxaJrehn8Sv66cvGTaphpkb2Qy0UlhwPIx:udIxelA6gGAhpknhGd
Malware Config
Signatures
Files
-
9ffbe1fa209891166e5737e3e9ed4f0c1dfe93ef8ff23cc25f83bdb822cdf8b7.zip
-
Multibot by k1yTheSecond.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ