General
- Target [07.02.2026] BotsLauncher 0.26.5.exe
- Size 151.1MB
- Sample260421-2t359adv2m
- SHA256 2f1e4425354d7bc85fa1c114fa5dc8270785bf22fe03581e714dddaa779214d7
- MD5 11b760f42f0a336cff2c97fbbbe0fd83
- SHA1 4a1f5363600cafd9671b266c4482945e72d90a65
- SHA512 7051ab7f3fe3e73810e83abfa8c76809d2925f33ecdfc5c87d684541ec93274ea46df9d02e728efaf357f2f1e445c14b59150ba40ac49a59e44e505257183780
- SSDEEP 3145728:AdXaU5sBgODclcfFrv0Ozxpr5Dxo4m7kgNx54skUSz1G8sFGC6HqUaqE6:AkAsBrDcGJv0wxpZu4xgil9zgPUaL
- TLSH T15078330AC6A1C6B6FC73E4F545BC7AE76287AC72474484CFB56CB8183732B71E085896
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
[07.02.2026] BotsLauncher 0.26.5.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
[07.02.2026] BotsLauncher 0.26.5.exe
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target [07.02.2026] BotsLauncher 0.26.5.exe
- Size 151.1MB
- SHA256 2f1e4425354d7bc85fa1c114fa5dc8270785bf22fe03581e714dddaa779214d7
- MD5 11b760f42f0a336cff2c97fbbbe0fd83
- SHA1 4a1f5363600cafd9671b266c4482945e72d90a65
- SHA512 7051ab7f3fe3e73810e83abfa8c76809d2925f33ecdfc5c87d684541ec93274ea46df9d02e728efaf357f2f1e445c14b59150ba40ac49a59e44e505257183780
- SSDEEP 3145728:AdXaU5sBgODclcfFrv0Ozxpr5Dxo4m7kgNx54skUSz1G8sFGC6HqUaqE6:AkAsBrDcGJv0wxpZu4xgil9zgPUaL
- TLSH T15078330AC6A1C6B6FC73E4F545BC7AE76287AC72474484CFB56CB8183732B71E085896
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.