General
- Target DeepRedBot.exe
- Size 19.5MB
- Sample260703-3n5mkahs3x
- SHA256 039d3bd8eb333da3cf4314e2bf54c4b4ea8fc2cad141d1a35fc8bbf7488640ff
- MD5 d8afa9af2a6cb373b57591b2170ca1e7
- SHA1 5eabe2d1e2f5d24d50e1850568e96868906338ff
- SHA512 1d8676812845c4257edd2e2cc376c177b58da87bc6f9991b025917806bef68cad71d3ea0f4f6d349091ab83ea4d5043459d1bcfe5ea39083a64b71d632452f79
- SSDEEP 196608:Z+azUtnV951h0XCfQbG2S6fQ4ELtW0BxPDgThUL9U57GnTatAgE5Hr:ZmHNzQa2Sl9PEThULW1Jo
- TLSH T139279C01A3F8066AE6BFC77884724516DBF6784A2721E7CF1444A5E92E33BC09E75363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DeepRedBot.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
DeepRedBot.exe
Resource
win11ltsc2024-20260630-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target DeepRedBot.exe
- Size 19.5MB
- SHA256 039d3bd8eb333da3cf4314e2bf54c4b4ea8fc2cad141d1a35fc8bbf7488640ff
- MD5 d8afa9af2a6cb373b57591b2170ca1e7
- SHA1 5eabe2d1e2f5d24d50e1850568e96868906338ff
- SHA512 1d8676812845c4257edd2e2cc376c177b58da87bc6f9991b025917806bef68cad71d3ea0f4f6d349091ab83ea4d5043459d1bcfe5ea39083a64b71d632452f79
- SSDEEP 196608:Z+azUtnV951h0XCfQbG2S6fQ4ELtW0BxPDgThUL9U57GnTatAgE5Hr:ZmHNzQa2Sl9PEThULW1Jo
- TLSH T139279C01A3F8066AE6BFC77884724516DBF6784A2721E7CF1444A5E92E33BC09E75363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.