Analysis
- user interaction
yes - max time kernel
24s - max time network
27s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260630-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/07/2026, 23:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DeepRedBot.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
DeepRedBot.exe
Resource
win11ltsc2024-20260630-en
2 signatures
150 seconds
General
- Target DeepRedBot.exe
- Size 19.5MB
- Sample260703-3n5mkahs3x
- SHA256 039d3bd8eb333da3cf4314e2bf54c4b4ea8fc2cad141d1a35fc8bbf7488640ff
- MD5 d8afa9af2a6cb373b57591b2170ca1e7
- SHA1 5eabe2d1e2f5d24d50e1850568e96868906338ff
- SHA512 1d8676812845c4257edd2e2cc376c177b58da87bc6f9991b025917806bef68cad71d3ea0f4f6d349091ab83ea4d5043459d1bcfe5ea39083a64b71d632452f79
- SSDEEP 196608:Z+azUtnV951h0XCfQbG2S6fQ4ELtW0BxPDgThUL9U57GnTatAgE5Hr:ZmHNzQa2Sl9PEThULW1Jo
- TLSH T139279C01A3F8066AE6BFC77884724516DBF6784A2721E7CF1444A5E92E33BC09E75363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 64 IoCs
pid Process 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe 2792 DeepRedBot.exe - Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 discord.com 2 discord.com
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\Microsoft.Win32.Registry.dll
- Size 26KB
- SHA256 3e0177e024d9d7ad16bcb52509eeb0b5a167390cf856c91426c180db0fa71fc9
- MD5 687a5f5631116d15149a267ce5bfba7f
- SHA1 77df011a5e19566dd3c06b263e602bf50e572ab2
- SHA512 5f0b3a5bef1f8d629850e117c454850bd56238e61d4a9e2e609722a89252e83d329cdb3cf9beb3d8b20874c440debcc5c6356c387c1e542f46b0d4eaf60e4428
- SSDEEP 768:eRqosbXwrUCndxhkiv2Zrqm2fteVitae:s9sDwrUCnmiv2ZrqxleVitae
- TLSH T1D6C22A12EBD4421FFAEF0F3E5CF2962542B7ADCE1E03EA5E0994028559777C48632726
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\RemoteControlBot.dll
- Size 34KB
- SHA256 b9a094a5fa6803c897e9c701354bf3ff0e6265477320d2d1a375cdd740042726
- MD5 667e033df11ff16f46c24322c4ade259
- SHA1 8ca58518e48873b0c1ecce8aa3f1a4feebf0ce5c
- SHA512 dd978abbae40665ef67692ea6bb9cf9218a1ec8c1a70bb95243059b9abcc352b94ea5e59ba0f67e40a3b36f321a153de90f13a45f85f48d606e3b479a59f7d6e
- SSDEEP 768:W1QYBqdsSOLeidls4r9Iu16b54NVaUakOjA:mTeiduQUYay8A
- TLSH T11FF2D548B3EC4A06F6FF6F7D68B1D2564A72F957A821E70D098C11E915B37408920BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Collections.Concurrent.dll
- Size 31KB
- SHA256 905f3b9a42ecb3d7fb881e0ce5cf2e984ae019b54d3badafd51a29aeb88f1159
- MD5 f3d11fae433d5d1779fd38ffcb3992f7
- SHA1 599c487bad1d9e5434fadc8ec69d330a6bd0f275
- SHA512 f5b6135b6bfbb39420199e9fe5908c5eb5a377d1cc7f60364f48e0afb63b4f30a2768190054ad069472c4403eb7ce0821b94919a0b1d46e65888bd9f37a1e101
- SSDEEP 768:lMtZZFrI1h43i6WX7HtcGBG+QceYXnTFvFXfe:Rh43i6SNpGTapdG
- TLSH T156E2C60037EC5736FAFF0B7779B685A40272BBA65917CA4D20D421994D33A400FA677B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Collections.Immutable.dll
- Size 77KB
- SHA256 e9e2a1c53d0543f691d7814a46aa3bbeb41051db6166f09aea5fa763444d09c5
- MD5 952d7150a0e581f98b02ffe8f7a85229
- SHA1 ec0ed1ded88febd68f03813497711b73a957bd9d
- SHA512 6297f9f622cef8976d5007a857f03b5f62134e86163938fa87cec31669c111b16b88b24726aebd0b11efd6cad49c8f003359db7f4b70013239dc9995146cd65f
- SSDEEP 1536:CescmgAP3tb0UMuEltjEpjF6f9poB8NPr/sb83ZjiFG:Cxc3YQUavA+rrN3Zmg
- TLSH T170733A0173CCAB31E6FF5A37B4A140994F359A23E52BE68E2DD9F7818C237004DB6556
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Collections.NonGeneric.dll
- Size 20KB
- SHA256 d5eca53125568d5a04beac2f49809c054f2a312410bd707f48cf73ce9e820374
- MD5 ea5decdb661a2b37de5aed12d7021687
- SHA1 f4ad756f3a4379b0216b34d82762f12fc625c3e2
- SHA512 a4a46522aee11d3f304f01e7e976e6bb1dc9fa1bb4d781cba86ce102aec95be0c197513edb8ba96b747eb6cbeb6e833e9db0221f7ab598535a0e58c09ffb82b8
- SSDEEP 384:fu84PelApXJncTOHydqUhlhKcBn9MyWRe5j0qFBez7WSydyy35LXHG6tG0Z5xH1v:WPeCpTygoIA5P
- TLSH T1D792E800B3EC2337FAEF1B7A58B6516247F17AA1A913EF8E1444104A9C67BC15A73723
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Collections.dll
- Size 25KB
- SHA256 cc63ca5338ff43b11ef308c263133986e79569d0e3fe8eadfae9eb1727dc4633
- MD5 3da7ad347d901489a46ccda7e246d403
- SHA1 dabe978fc64fee3462c49d011f2b875487f2a564
- SHA512 afd0dcd701d15bfc1e2e15657f0fca91f1bc88dc8f75b32fd9e1995d05e71e4d40bda26b9141d7ad25cccdfe5cd78f541f68447cdaa10560fdef2e0eec21814d
- SSDEEP 384:YiL/6Bx5oL1rU6kBw0CjbGp3ekfTRtjH3O6uM9WUSsJv6q3+uFVz7VMde9j1XcPc:pyB4nkBw0ibGpFTV976eVSLJ+
- TLSH T10EB2D61477DC1336FAEF07BBA8B211500339FEA62912E71E2494221A5D77B604732B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.ComponentModel.Primitives.dll
- Size 15KB
- SHA256 c4ee734c56638ef7f1e2179f1cfd0544dce5936687786dc6412e11e3c5942ce8
- MD5 87bb609a911411e80eea4e5c195a4609
- SHA1 f705e4eff398c9deaaa09dcb1e423f2b24b26fcb
- SHA512 da480dbb56f8ac44cbd9bf23b6daca990ab6e375958cad931b400c5c33a2d3f6f9a8a7ce188544103fcf0179838f575075e040406390e24190e7a8fb2e50f900
- SSDEEP 384:LrtghIor4125roDljba8LpRITDTsHhnMkP6oNnSNlWnGZW:ntUjr41qrohhnmD
- TLSH T15A62072973F843B7FBFA0B79B8318A5012F6BA157A13CA5E85A0500F2A777410761B77
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.ComponentModel.TypeConverter.dll
- Size 129KB
- SHA256 cc220498dc063a836220a1515e9903c7e816e7c088ad69a725bf1c410d3088d7
- MD5 039f5f13e87c22899fb33a18181ab33b
- SHA1 079aad4678f0e58872fae51bdd3ca488d6ff9efc
- SHA512 291e3e4cff27d79488d926ab0d36d40720c707659204cb17d977b44416e6c6cf00daa01ee6371a1beb6c20559480599b3e2998d7f1644729b95e25f7b18baf36
- SSDEEP 3072:OQ2DPIRcczzcnJw2XfpR+MMFHD+ahbXnQsd7gH:cJHXfpRuqahvd7
- TLSH T18BD34A2923EC9B59EBFF8B31FC309110EF75BD562561EE8C498019A905B27C01A327B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Console.dll
- Size 38KB
- SHA256 c66a821bbb3fb35ae9a23e32fc78c44b6481aef1481f0fae7dbb79298d1c15e1
- MD5 2e2fa64bae40eefbfef82e000a83b366
- SHA1 46c3918a735b6dfa867db3ed7c72a0c8a173a57c
- SHA512 71fdd9adc8f42e52af9ad26522dd935687a6b1af89617d95ee110c7ed1b839472306f5a43f8698531cace569e307b4c2d1e8d857df773863966501751da22751
- SSDEEP 768:LWzd3uZgU1WAfmXTQU80LRUy2DmPwCQPn:Czd+7WVDQUI9Dw1Mn
- TLSH T1D9032846FBF0422FFBBA0F30397B12442636BAEA1C03EE1E5595111E5557B808B20BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Data.Common.dll
- Size 556KB
- SHA256 0cb5b884674bc6472923713037205d05e606cf8f573c97a9de03597a45401345
- MD5 523e0f7687246d991f65630bd78757a8
- SHA1 2460998cecf4903164663073cc17c69c670b8142
- SHA512 71d70518ec9099ed83c65a25e81f183fdca6d97d27330c788ab3b50ed6eb853884c57333599af96b7c187df1aa103686d953e8de062b3bc432e8a54e315fc780
- SSDEEP 12288:UtfJhcMfqur39pE1sGrRYXC0TtSpyFN0gNEdZe:sQ1svXhTtOq2Z
- TLSH T140C44A0527FC4A2AE6BF5B31B179522CCAF6B8136785E78F5C5525DD0822780CB623E3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Diagnostics.DiagnosticSource.dll
- Size 122KB
- SHA256 bbfb15e1c87b6f56cfc56dc7476ebb2d5393f67143d2b946e5080d22e7a3770b
- MD5 80e339b6c04b9c5f64055489160a16a6
- SHA1 1a74da88cedd7d96142b203f042b71762e273b2e
- SHA512 be353c4fb6e306faaa5f2ace72e2be6d337ee2ba80598bc0fc0a171525cc4ebdf59f2a47b94118d4513441f3c489016a8c1b54f8d73997f4c42a993c54b2585a
- SSDEEP 1536:x5VTbnfGuNvaYSFpCcj09eXNPt/o/pW6pcytCCC9BCN+tnP+M1RS:x5/aYSF/yeXXeR2Dq+E6S
- TLSH T10EC37C2433EC4627EBEF1B35F0A480028776A65B6922E7CD6F8838ED1D137415A617A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Diagnostics.TraceSource.dll
- Size 11KB
- SHA256 2fecb0c44863d799ca854a261f87dbc88dc1c32771e4900dcda561f9dd01e0d0
- MD5 90e07e441439b1d454bae7918e402dc1
- SHA1 a8d1658dfe8ec879fe37569459fd4313e9e29e05
- SHA512 bf6805fb7a8e939f2328a69dd720341bc3d3ccb239c8ac2d887d2f58702d25fc370eaf1eb71886d3ae3dbf87667701b8908d1b180743e972bcdd45a73d2f2a5b
- SSDEEP 192:mx9g3hxwJZSywDvryyYasxQg1fR2NcKbxRPwihgWPoTW:mkR00DvOyYayQg1pUb1xgWPoTW
- TLSH T151322A28B3D4433BFEFA4B368875529017727E946903DFAC8549015B4867B80AB73B77
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.IO.Compression.dll
- Size 40KB
- SHA256 92bd835a97c8850ba67130970220ab0b4a461ecbbb4fffaa2062d97b4049c17e
- MD5 640487e6ea28b96876c5c009c5477239
- SHA1 05905b48768de508ea3b47d5e14714fb0c6db587
- SHA512 8fff612b216d424839eb62851dc67f17a876ce74d274161f4a82925464810f1365cc63fda10b495c97512681de46f76aa1432b2cb48c1e60ec5a513662d19096
- SSDEEP 768:l+71nXH0tkWSxk38mcy9dgZzHV3J/boUAxFHl:8xE29x0ky9dsH/boU8FF
- TLSH T1C6034C8993FD0127E6AF4B7A6A75D11603F6B9353E02CB4D544CA0DE25637C48BA23B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Linq.Expressions.dll
- Size 492KB
- SHA256 6109ebaa90d5f56a476f8bef25ea497e6de113dc7a4d98cc2f163250d60067bd
- MD5 48c2eb8a9ab907ef039d6a5ca82ba27e
- SHA1 748cd10a503125c27081729138cc4318f261e6c9
- SHA512 764fa13d05e034008101a65f95b8c4f58c8c7d9eb8eef398e5c0ea4e59b0ef4c9da3c334e08268bcf469780605a529d9fdaacb66426d9c9d297667b0078d74d7
- SSDEEP 6144:6YlAsGUPmEhiDPzTBA18kInw8jmXcFJROss1QhIaFchJL2kRwrlkyladhCwx+Je9:FirK18rntmsnRN0hFwru0
- TLSH T180B46C2033FC4B25F5FF4BB5A4725B181FF560132B96D70F788194A4AD473829AA93A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Linq.dll
- Size 64KB
- SHA256 c81a183d4820ad020c7c14133647544be3e87d5c9ed8a9b34d0766eb3ef4d747
- MD5 bcb329906e23d0c0d07d79006dec8eed
- SHA1 cd13fbf805d81e9ae4711934014cb4b510af27a0
- SHA512 853a199b9471cebebb43d634b2c3082c82023fe82377af16eebd327816db2935df774ecc3a708b254b7c9fe4c1dda183e5998b886dea9cd3130a3aea5153a4dc
- SSDEEP 1536:E09eCxqv8nRJ6sXk+JW52a49bWxmGI6ZzbP1xS:dkvYRtTMf4Z3GHJC
- TLSH T1AC532A1971CC4B23D2EF1ABBE070309B4771C5A6AB0FF68A6DCC5BE448973905D701AA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.Http.dll
- Size 548KB
- SHA256 2959f739ae224be3f1d8bf47f144054ae0e90acd8ed492905958d40e26dcb157
- MD5 f63a21b84cc16b47f529c9692ce79836
- SHA1 c4b339e537910a9f2ed4ebb2557216b7970bd7af
- SHA512 b05e11660284fda3623af5b24d6a180ad82bb601ccab22483b8b182cd51e31fee25da5d4c300b188ae2c5a4e50afbb5a303a0ef5e7b97a98bc822d68b5521ffb
- SSDEEP 6144:MBs82zUhrT/5QjJqqPE/rXT0BCvyF3soQNzIFr/Sa1kAglg/2lJRpXdqVaNdOQpl:QBqVPQON8oQgSnAuAqJRpxNwM
- TLSH T111C46C04A3F45E13F2AF6B74D434492DCFB67903AA65FB4E1988A4ED18A2780ED51337
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.NameResolution.dll
- Size 33KB
- SHA256 8fae3257fd7a6cc3eb065839076657644df5d033cfccba56bf5aa5d26c9b85e4
- MD5 b8645e4614667089b1e0eec62b565aaf
- SHA1 24d4f1cf80e754b0e3fba61400b4477ce66bbf8c
- SHA512 820d0afce6def752d16e1c82792fa24f30fb4d1fddbd51eb13bbd341e87e6e35d61db9d6f118e021df0c23be83d945e2bb928a875f23fd9ac7862adb5d5f2493
- SSDEEP 768:46BNDVP9kyddoE2C2ZNXlRz1n/cs7oKFYuNfuP9e:lBDP9Rdd52jXPRn/Fo4N2PA
- TLSH T157E25C0063E59726EBFF0F39A4B193041376750A1D23EFAE6D8C615E1DA3784A5227B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.NetworkInformation.dll
- Size 29KB
- SHA256 e7d7936a6d4a48541a58b4804960f62dfc2ce4d0110b268544b497c682579b1f
- MD5 eb6c78a1b8fd05e52d4fd1c5b5dc6c75
- SHA1 27e21b6ccc01bf65d0b5425e0e5e414f4d690456
- SHA512 3272e962c48fca5b08e05f907b14d06868629129da9f7f80b414e6272d2bcd65302c638eeb53f36626b77e13532b45df9d4fe3513f399467168fa375fff40b27
- SSDEEP 384:MZQmVrz+nP88hWynloJokR7nQyNEHmkMdls/XKv59u9dXF4ws4lMO3Rap9S1mk+E:MamhKP+ynlo3FNEHmkM3cSu1WTL9SIu
- TLSH T1E1D24B10A3DCB33ADADE477498B12219073175C02513EBAF06DD966E59E7B804F22BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.Primitives.dll
- Size 71KB
- SHA256 8926809c4d7e6c115f6abe6d0c7d0d90e2bdb8eff4a64e8040c7b73bf31ca4fc
- MD5 e553e557e95d08def10bf8071eae898e
- SHA1 7335883cd459f2911416e54d0896b49ab5ac8442
- SHA512 6d35b89ac161ea689cfb493d703574658cc048846cfab52636d5f35b50ab68281d12efebf173392fc26c01c582d1cbbfa500c8429a41d834e6ecf2b780ac3ef3
- SSDEEP 1536:P1PPiVSrZnOMuJbGpnpE2etLJUgOgWvkOdJYJmI+z4pKJHwF6t/JVRWDzgMyci:P1PaVSFnPnxetL+gOTcOdJY8I+zCKJH/
- TLSH T199638D5873EC9F1AF3DF4BBDA07055250271A65A2A12EA9E1C9594CE0C637C18F237E3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.Quic.dll
- Size 95KB
- SHA256 548f325f3e756ab6fe1e1d79a3533eef8eef18edd27f31044e853a4e61c9a8ec
- MD5 e1ba7f240a1f23b7f530d94265727c2b
- SHA1 0c0239710d6dde47642fba9e9044434f33f12d0d
- SHA512 d8ac1b7de2575919168665c7644e9746f362ab52a4c4c60ff891636d2bfe09ebfc26c8564e6c3f4017f2d266c64de68ab56f756c794a753c2626e89ecf9a0efb
- SSDEEP 1536:Hq1e5kRZMZ2alL5qElnKQnbB90FrFTIizAx5KXICYQYjrBEbhr/C2M8TeLv+TOMD:K1Ok42azqYZnbBdoXYljrBEbhm2M8pi
- TLSH T1CA937C1033F48B2AFAEF9B7E95B4515146777D8B651BE30E1C8960EE08A378049627F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.Security.dll
- Size 192KB
- SHA256 f098dc90bded87e1f77206690218cee53f3f89abede420399fa3ea605589f2e3
- MD5 4a45bae5bcd53e7ac581e050a038291b
- SHA1 342ab3433f571021c6fa854f26147a52e14baa96
- SHA512 5042ee148df3c535c93f6443cca31fd5ffdfd5fe9fa6b33af0601ef88dc2f661a8e2507973a9062a8998151951ff87c4fc1d4eb8eaf3b7247f273b92ee4d2c51
- SSDEEP 3072:BQ1g7XwbUsqJ0+wlmlgsmR+NPhgF/iX5CaYEcqhjQzwcDhbydqtZGuQ4qYno:GU4mlgfC0iie6as1Q4nn
- TLSH T1CE146A6073F94B7DF7EF4735E8708490877EB58F2E26D68D184440DE5882B92862A7E3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.Sockets.dll
- Size 94KB
- SHA256 ef0b6c3921a995ad5ab6dfff9249e0ccc9472d924e014950a86df6cd15335418
- MD5 8e3749b0038e486c2e6ed8dbf71f10f0
- SHA1 169f25ed34da72dc1d55b1fb4648ed20059c2701
- SHA512 867f5a059ee61cf603aabc4cadd16a6322371283225720b9fdc1d55bef13ba42e00419a909f3fb21953848d9a254278905120a0ba1c250e19c575d6f4dd1c7a2
- SSDEEP 1536:/TD2p58U+NDupUcjEhxvU+99FLc2zHfKyPVSVEEfJT4iaWlr:/TD2A5NDupivUAZbVSVEaJcur
- TLSH T1BB936E68A3FC0A27F6FF1B39A874264416B678E62F03E79E1458548F5853BC089523F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.ObjectModel.dll
- Size 17KB
- SHA256 25a359c15be3bfe2bd3cf8662031f8027b98523bce3ed8c023c5131a74a9d391
- MD5 f41e7dae7d4c0ccb0b8a1a077fb400d9
- SHA1 49fee347cb378ff0ec246edce20225556d971419
- SHA512 5669d47a14c529c890904f58f80b103e91e9b29b6a3cbd587dd81ceb7bf0c8026d7cb35bc0c08775aa0f681892c9f5b468c267fa1382fca60c8154c70ae07037
- SSDEEP 384:91hb1eS6rsEfJgCChlh1MyaWsYpBVtuEFEvZ7ejhjKdz3U94aPpWSo0XW:zhb1BEgCi4IpoK5
- TLSH T13882F700B3EC133AEEEF4B36A4B625941731BBE66613DB1F0484604B9C627460A71B7F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Private.CoreLib.dll
- Size 2.8MB
- SHA256 2093bc658763515322ab9359fc6cd030be5c4c34dd919e14eab1618e257aece4
- MD5 065a9546d94c717c6c7ed5779838c694
- SHA1 1a9a31cfdb90a6de44148ee73975ae5db3b2e8ca
- SHA512 d8b3f6f03f7c215a6c030c93acad3e553324d0eda6f7c614b8908a05eb56d60baf3a9d6adf348fdd3e70982748045b5a0dc65e217e2d627295f80fd834b05d6f
- SSDEEP 49152:dfmzNyQhULJA8JG3PgwNrTeXG57pO65hk:JmzgQhULJlJyF57
- TLSH T11AD55B20B7EC9B3FE19F4B35947144165BF2E9DAB743EB4A200865A96493BC01E523F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Private.Uri.dll
- Size 74KB
- SHA256 d7f044cb250a2048b06e5630f4140e7e82f8008edcbe4d6e236dfe0ab3dcffd7
- MD5 a5a164a331501e0754412216cc6062c0
- SHA1 3ffa0127c216075c146346c96aae6e01f1a6fb8b
- SHA512 7399a74aac9dd70b9f9b2509db8278ec9fd5dc9bdee021640eaecc3d2e120ef5ce38086c2c33bfdd037a6405291bbd02e9dc327739dcb3c79e536f4b57c7c998
- SSDEEP 1536:XKkKuWLX7hdloBrMEOgxM3H2/V+neFsa9DRyReX3dheSDtG77o:akKucX7hdloBrMERxM3Ho8a917rDtGvo
- TLSH T181733A04A3FC826BFBEE07F9A167135306F45826A953F3958CA834CD2C363D255667A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Private.Xml.dll
- Size 1.4MB
- SHA256 fe8af37950dcec1b60a54b3868fe54affc378cdc8c65e950ceb620250b369b9b
- MD5 6708472850fe7bb1c8c9a955aa8c41ee
- SHA1 a270a72d578eae5861bd299aa0221bf0125dc56c
- SHA512 d072c8dbbe5b09254335f650932a144e5a6f4ac821c498e7be56d6fb43e3d5cf82555e2e35071d720eb11fc7069c5985fcc8904b8e8e601258823b6ac71d0273
- SSDEEP 24576:rnTaDU5t3NJdnCz+gtvziOKa4HJ58Wb3kV19RaBJqLtQF3:rnTazFzh4PuRaBJqLt
- TLSH T1DC657C40B3D84F2AE2BF8B78B875D93D47FD68126381E75E344CA6DC1A36B404991B63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Runtime.Numerics.dll
- Size 90KB
- SHA256 10789858ffb3beb44eb564daece0f54913ea0725041fb1d8c170dd34496da18d
- MD5 fe5bff1f3929efecfb0696cb13cb1f0a
- SHA1 5f8f475700a55022e1ef5c987982ec722f68bddc
- SHA512 e3e11cacf2ef35d4e688d5ccfa968fe5da7d4de1c63613893fc5f46f32d9889ff8b549f027047c65752bf92baa36e7fa1ab96e1f06de714b87a12d3301302c55
- SSDEEP 1536:oxGSqPxTfKYMeR5nBKk+hYBLYUSlw8PMzKDYYEUFmv/fR/+jgxZlHvbIZZCda7dJ:osyYMeRJBKk+hULoHMzKDYYEUFmHfRcv
- TLSH T1CA931898B39DCD1AEB5F85B07134535E9B305D031506EBA3AEDC15E3A223BC966121F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Runtime.Serialization.Formatters.dll
- Size 17KB
- SHA256 fa872cf061a9ca1e1107c174b929cf18a2393ef83a851df5071e5c392ea52e19
- MD5 72bf67e89cfa621df3a2d7e1ad68706a
- SHA1 6ae41ca03b1c369d17e3874d9baa03791b45d8d8
- SHA512 7ac481ce4e047db3f4372cbbb0fc6173e8f7b0266f5d5eadf7af8ff80c40025f9772c663d0b88b0b9418268bc0723e8efec929848be53f3e9962b8a8ff026b72
- SSDEEP 384:WLTITKd/xBrdIBBHBQrfbGKDc6BIi2afkUx8BUIlBPQkPKvPqrk/JHSiBvy6Wg9F:KqKd/xBrdIBBHBQrfbGKDc6BIi2afkUf
- TLSH T1E5829306F3ECA6A2F8F74775EC77B0808EB77C652951DB9E2095802E106BD444BA2737
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Runtime.Serialization.Primitives.dll
- Size 5KB
- SHA256 84ee21ccd2cc85c297f0a2ca051a04317a809716e5eb748d472a91815df8e2db
- MD5 1c4b403d553b4e69cff108fbd9987c5e
- SHA1 f4434a41389ad9d4065e00e34d3e557a66036239
- SHA512 f8e19ea87ce24d2e7c89740076547f9a4b1781053c8d994732a42a995f071adf1c7f78f3343d0edd9c5f60d70e71072be319ee6778ab0225b1995493ace286db
- SSDEEP 96:/EIz24hoR0VbjcxvHfRQMaDmDj7DYHWFIQJBrW:/cKoVxvfRQrHWFIQJBrW
- TLSH T1ECC16425D3DC9336FCB70736EC33A6814676F948D92BCB6D2195520BA85A6014B71F33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Security.Claims.dll
- Size 15KB
- SHA256 da948104f0d0e58c7b10d56166571195050f3bf02a238228bd00f59b180bb57e
- MD5 31d349e5228a68bc4bd24fd5f972be64
- SHA1 f70edc8482426326558a73f3ed3a438e0fb5d449
- SHA512 8115be9c61d789c1ace67177b5ed96f932027f0f8533bc3b7b65bf28cd00f937aa85601694bdce6799fd57d73ce06afa00b2a084059063216bada46a06bd3e57
- SSDEEP 384:ikUGL7ogWgC6Tl+aKDfe89AtmQoijVrJsyr6WWVUW:ikUKo+zcTURJ5I
- TLSH T1DC62171563EC433BC9BF0F3DD4B142454372AA25AA62EB6D4AA4604B6893305CF32F77
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Security.Cryptography.dll
- Size 255KB
- SHA256 e1885827fd8ed39a0b30775dded2b485c3a3cd39b79c43db0a89ad3a6142b055
- MD5 81715fbf07c51867dc2b2f9535221e52
- SHA1 8f1e645dffc3bd4c8362254aebda1441c82aba2d
- SHA512 1525426a598e34d256be6dd246c26843cbcbde90fcd9f0c288a98a464437780a96286c14b53c67df07d378324884f106c9ddcde7de64e93e7fd3f049e1cf09f0
- SSDEEP 6144:fmjUK/SlWAbNwys+Gc2Ze+nmkedufn0fLLPN6u5V:f8UaSEWNKC+mBjLw
- TLSH T1E7444A1DB7F44F2DF1FF8735D070500A8ABEF49AB957EB0E098526A918237818A1177B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Security.Principal.Windows.dll
- Size 48KB
- SHA256 8fe634304196771c51a7a7f404008a878d4a2cf072e715575d675a9910b1f200
- MD5 39db770d1fa4f62f731b7358822d5f14
- SHA1 c3d85f26fa813d8df9696ffc3bbab37afea8e5d0
- SHA512 39fe95e7a771e4086828a1c8df80e98ebc4257ab2db180bd645974e2a7b2e2957ae4dfc6364da5ba5c6de06d7a66852a2855041406b4d7df966324440ab3f5a1
- SSDEEP 768:NpO570MljlIvaYHpOYFDt0Mo85yTX+sMGifUra//1WCdi1QhaLZg42MZ/Oa:NI5oypMbD8dTX+sXi0Y/1Hg1QhaLL2MV
- TLSH T198236D1063FC572FF2FF0B3C64F1621A47BABD166E52EA4E0CA2554A1863FC18621767
- MD5 SHA1 SHA512 SSDEEP TLSH