Static task
static1
Behavioral task
behavioral1
Sample
CoD2[PH]BoT/CoD2.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
CoD2[PH]BoT/CoD2.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
CoD2[PH]BoT/CoD2.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
CoD2[PH]BoT/CoD2.exe
Resource
win10v2004-20221111-en
General
-
Target
acd9cf90263d56b105cbc0a9690eebd6a43b5d2c211f7864b926518f269afa24
-
Size
576KB
-
MD5
47f7af679ac25a4b1badceb401463520
-
SHA1
cbfcdd59dc3d1e6baa95b29cedfe3d58f35e6ad0
-
SHA256
acd9cf90263d56b105cbc0a9690eebd6a43b5d2c211f7864b926518f269afa24
-
SHA512
16acfa919c64d15de451cbf7ad0aebc35105e18dd431dee0ea4b47fc027cd19bdbdf9b93c0d998b96a99d688bce962c8d3034d7f93ddc860e8e879934b79ae15
-
SSDEEP
12288:Gvk0iCZFouxXnDHFRTiII4umokz4hs9g08V29VjENhgWkvEga8bpu5UCCQFp:GT5nouFjDiI1E+9GuYxkBa8Nu5YQFp
Malware Config
Signatures
Files
-
acd9cf90263d56b105cbc0a9690eebd6a43b5d2c211f7864b926518f269afa24.zip
-
CoD2[PH]BoT/CoD2.dll.dll windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 473KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
CoD2[PH]BoT/CoD2.exe.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 91KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
CoD2[PH]BoT/Key List.txt
-
CoD2[PH]BoT/PH[SET].ini
-
CoD2[PH]BoT/ReadMe.txt