SecuriteInfo[.]com[.]Win32[.]BotX-gen[.]4881[.]16128[.]exe

General

Target
SecuriteInfo.com.Win32.BotX-gen.4881.16128.exe
Size 350KB
Sample221226-2fcq5sdh66
SHA256 baa5c6d54c809d20b8a2b5c2645f7c6d99c627e1a8e2bb844f071fbcb3cee6e3
MD5 56efc71d5addda8d30bdc24ee87ef9c8
SHA1 8bf9c65136bea1e4796b93f1f710486330ca8cc6
SHA512 eb25c836ffbf557a37f886dde90b9f4cb0d80597efc02698445948c881126638b48fec0b9a73db7fbaf8a10ede85321714d25864ecff84ec0140d5360db74e08
SSDEEP 6144:+BLqd3zGWkNZMKfd0S1x7dBQlDJ/0VtHISH6TDi+Vl7l:AGdiWkbd0S1p+dK2SavjX
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Win32.BotX-gen.4881.16128.exe

.exe 350KB

SecuriteInfo.com.Win32.BotX-gen.4881.16128.exe

IMPHASH 1ddc7148f458b790d7ad3f29826eef5c
SHA256 baa5c6d54c809d20b8a2b5c2645f7c6d99c627e1a8e2bb844f071fbcb3cee6e3
MD5 56efc71d5addda8d30bdc24ee87ef9c8
SHA1 8bf9c65136bea1e4796b93f1f710486330ca8cc6
SHA512 eb25c836ffbf557a37f886dde90b9f4cb0d80597efc02698445948c881126638b48fec0b9a73db7fbaf8a10ede85321714d25864ecff84ec0140d5360db74e08
SSDEEP 6144:+BLqd3zGWkNZMKfd0S1x7dBQlDJ/0VtHISH6TDi+Vl7l:AGdiWkbd0S1p+dK2SavjX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14180

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputW CallNamedPipeW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineA InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeA LocalFree GlobalFlags ExitProcess CreateActCtxA GlobalFindAtomW CopyFileW VerSetConditionMask GetConsoleAliasA DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetConsoleMode lstrcatA SetFilePointer FindFirstFileA FreeEnvironmentStringsA EnumResourceLanguagesA InterlockedCompareExchange AreFileApisANSI InterlockedExchangeAdd GetModuleHandleW GetTickCount CreateMutexW LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

user32

CharToOemBuffW

advapi32

InitiateSystemShutdownA

Sharing