Extracted

• • Target

    8848598d834c331cbdebd866377c14a0fb26b015fe48929551d45e70006dcf6d

  • Size

    36KB

  • MD5

    d2338c78ee48e6dd1630c098bb6324e5

  • SHA1

    278311f211e5dd14cb56b5867a53814ccfb0b50a

  • SHA256

    8848598d834c331cbdebd866377c14a0fb26b015fe48929551d45e70006dcf6d

  • SHA512

    8908251799094022f5b417b2b0c909914ae6795bedf79259782df375471a6f6a788c56589de4ef2e8c818de12643ca3974a28de8822a2055cb10ade2e63e88fe

  • SSDEEP

    384:0ewNOnxK8uiEejM/wHQqhrXxGm4hEEZ+DMsuTmex+HFY+EKWbwFt+AYt9SKSMQMv:eO8Ni5jfwqh0hSexnTbgJrGPwb

  Score

  10^/10

  mylobotbotnetpersistence

  • Mylobot

    Botnet which first appeared in 2017 written in C++.

    botnetmylobot

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2