General
- Target Borion.dll
- Size 6.8MB
- Sample260628-t531maav6m
- SHA256 f817a885da4dccbf2fca45dbce77e035a232956a8c31faeb3dad303ee0f84c4b
- MD5 4eced87926b262224a2b29b936ffdd7d
- SHA1 03c28ef08cd962cd3f1d549795bd975ec1fc5099
- SHA512 92a1b55f0bc985584270b9228ca7f146fa651ef7f065b555b553d4e23ff9c6134fb01b0f1d5a56b8cef8b362e505ff2246eee557368822c5e094b8cbd8a5fef6
- SSDEEP 98304:nHc8cWuldGJVo7zPGc1j3lH2Q/G3U4MGU6G:nHvzSGEr
- TLSH T10666E43D24EF01B9E53281FACDDA2846DAF77C09832496CB950C5A9ECE7FE9C54A5C10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Borion.dll
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Borion.dll
- Size 6.8MB
- SHA256 f817a885da4dccbf2fca45dbce77e035a232956a8c31faeb3dad303ee0f84c4b
- MD5 4eced87926b262224a2b29b936ffdd7d
- SHA1 03c28ef08cd962cd3f1d549795bd975ec1fc5099
- SHA512 92a1b55f0bc985584270b9228ca7f146fa651ef7f065b555b553d4e23ff9c6134fb01b0f1d5a56b8cef8b362e505ff2246eee557368822c5e094b8cbd8a5fef6
- SSDEEP 98304:nHc8cWuldGJVo7zPGc1j3lH2Q/G3U4MGU6G:nHvzSGEr
- TLSH T10666E43D24EF01B9E53281FACDDA2846DAF77C09832496CB950C5A9ECE7FE9C54A5C10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.