General
- Target AutoFarm.exe
- Size 812KB
- Sample240513-ylm8aacc22
- SHA256 2aad3fea228ff6fda7b53f294bc2668a44b9507444ea617a539a194c009c4523
- MD5 2ee7111f990aeddc7524f87eabbbcb72
- SHA1 88e962e56e5d755353b6b291f3a4e8284d213d2d
- SHA512 853d1f523e6dc2bda49fdc657e0f94e80718070d2fe9445112c2d47a3c5c91ec5a39a407eaeda1ae096ae02a7f5a1b051bf816ef7be99c865caec3f7335b1b54
- SSDEEP 12288:S3v6sgx8iIivBmxWb30XJe4s1lPSOCx8zmRaar5kuHer2zHhaJsICKgK:S/6tIu3Ujs1VDCx3GuDJK
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AutoFarm.exe
Resource
win10-20240404-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
AutoFarm.exe
Resource
win11-20240426-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target AutoFarm.exe
- Size 812KB
- SHA256 2aad3fea228ff6fda7b53f294bc2668a44b9507444ea617a539a194c009c4523
- MD5 2ee7111f990aeddc7524f87eabbbcb72
- SHA1 88e962e56e5d755353b6b291f3a4e8284d213d2d
- SHA512 853d1f523e6dc2bda49fdc657e0f94e80718070d2fe9445112c2d47a3c5c91ec5a39a407eaeda1ae096ae02a7f5a1b051bf816ef7be99c865caec3f7335b1b54
- SSDEEP 12288:S3v6sgx8iIivBmxWb30XJe4s1lPSOCx8zmRaar5kuHer2zHhaJsICKgK:S/6tIu3Ujs1VDCx3GuDJK
- MD5 SHA1 SHA512 SSDEEP
Score8/10Downloads MZ/PE file
Executes dropped EXE
Legitimate hosting services abused for malware hosting/C2
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.