General
-
Target
Botkiller.exe
-
Size
163KB
-
Sample
240722-fbnryszbkj
-
MD5
a668cb93c16026b6ee15b96dbd13d64f
-
SHA1
878b50a51f28a78ab4350d0c8b327c8172301de6
-
SHA256
1adf26633c17278c9b930529b164637a8942cbb1f3267afafec63b56de51dd96
-
SHA512
e291e45706ccee09d8f5314a871b783a69ac7caa764c8e9d0c4efe2e548aaee76e77fa284e662e19bfce21b6448e7383b772a8a510f1d903a77277b703ba49d0
-
SSDEEP
3072:z6JM/iN8vLfG+EZm0jNJmG2F00EfqADbugtWlHn:z6A0BJmGa0HiibeH
Behavioral task
behavioral1
Sample
Botkiller.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Botkiller.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
Botkiller.exe
-
Size
163KB
-
MD5
a668cb93c16026b6ee15b96dbd13d64f
-
SHA1
878b50a51f28a78ab4350d0c8b327c8172301de6
-
SHA256
1adf26633c17278c9b930529b164637a8942cbb1f3267afafec63b56de51dd96
-
SHA512
e291e45706ccee09d8f5314a871b783a69ac7caa764c8e9d0c4efe2e548aaee76e77fa284e662e19bfce21b6448e7383b772a8a510f1d903a77277b703ba49d0
-
SSDEEP
3072:z6JM/iN8vLfG+EZm0jNJmG2F00EfqADbugtWlHn:z6A0BJmGa0HiibeH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-