Resubmissions

03/07/2026, 23:43

260703-3qkp6sdv6l

03/07/2026, 23:40

260703-3n5mkahs3x7

Analysis

  • user interaction
    yes
  • max time kernel
    24s
  • max time network
    27s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260630-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/07/2026, 23:40

General

  • Target
    DeepRedBot.exe
  • Size 19.5MB
  • Sample260703-3n5mkahs3x
  • SHA256 039d3bd8eb333da3cf4314e2bf54c4b4ea8fc2cad141d1a35fc8bbf7488640ff
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 64 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Processes

  • C:\Users\Admin\AppData\Local\Temp\DeepRedBot.exe
    "C:\Users\Admin\AppData\Local\Temp\DeepRedBot.exe"
    1⤵
    • Loads dropped DLL
    PID:2792

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Microsoft.Win32.Registry.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\Microsoft.Win32.Registry.dll
        • Size 26KB
        • SHA256 3e0177e024d9d7ad16bcb52509eeb0b5a167390cf856c91426c180db0fa71fc9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        RemoteControlBot.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\RemoteControlBot.dll
        • Size 34KB
        • SHA256 b9a094a5fa6803c897e9c701354bf3ff0e6265477320d2d1a375cdd740042726
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Concurrent.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Collections.Concurrent.dll
        • Size 31KB
        • SHA256 905f3b9a42ecb3d7fb881e0ce5cf2e984ae019b54d3badafd51a29aeb88f1159
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.Immutable.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Collections.Immutable.dll
        • Size 77KB
        • SHA256 e9e2a1c53d0543f691d7814a46aa3bbeb41051db6166f09aea5fa763444d09c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.NonGeneric.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Collections.NonGeneric.dll
        • Size 20KB
        • SHA256 d5eca53125568d5a04beac2f49809c054f2a312410bd707f48cf73ce9e820374
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Collections.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Collections.dll
        • Size 25KB
        • SHA256 cc63ca5338ff43b11ef308c263133986e79569d0e3fe8eadfae9eb1727dc4633
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.ComponentModel.Primitives.dll
        • Size 15KB
        • SHA256 c4ee734c56638ef7f1e2179f1cfd0544dce5936687786dc6412e11e3c5942ce8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ComponentModel.TypeConverter.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.ComponentModel.TypeConverter.dll
        • Size 129KB
        • SHA256 cc220498dc063a836220a1515e9903c7e816e7c088ad69a725bf1c410d3088d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Console.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Console.dll
        • Size 38KB
        • SHA256 c66a821bbb3fb35ae9a23e32fc78c44b6481aef1481f0fae7dbb79298d1c15e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Data.Common.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Data.Common.dll
        • Size 556KB
        • SHA256 0cb5b884674bc6472923713037205d05e606cf8f573c97a9de03597a45401345
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.DiagnosticSource.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Diagnostics.DiagnosticSource.dll
        • Size 122KB
        • SHA256 bbfb15e1c87b6f56cfc56dc7476ebb2d5393f67143d2b946e5080d22e7a3770b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Diagnostics.TraceSource.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Diagnostics.TraceSource.dll
        • Size 11KB
        • SHA256 2fecb0c44863d799ca854a261f87dbc88dc1c32771e4900dcda561f9dd01e0d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.IO.Compression.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.IO.Compression.dll
        • Size 40KB
        • SHA256 92bd835a97c8850ba67130970220ab0b4a461ecbbb4fffaa2062d97b4049c17e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Linq.Expressions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Linq.Expressions.dll
        • Size 492KB
        • SHA256 6109ebaa90d5f56a476f8bef25ea497e6de113dc7a4d98cc2f163250d60067bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Linq.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Linq.dll
        • Size 64KB
        • SHA256 c81a183d4820ad020c7c14133647544be3e87d5c9ed8a9b34d0766eb3ef4d747
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Http.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.Http.dll
        • Size 548KB
        • SHA256 2959f739ae224be3f1d8bf47f144054ae0e90acd8ed492905958d40e26dcb157
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.NameResolution.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.NameResolution.dll
        • Size 33KB
        • SHA256 8fae3257fd7a6cc3eb065839076657644df5d033cfccba56bf5aa5d26c9b85e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.NetworkInformation.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.NetworkInformation.dll
        • Size 29KB
        • SHA256 e7d7936a6d4a48541a58b4804960f62dfc2ce4d0110b268544b497c682579b1f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.Primitives.dll
        • Size 71KB
        • SHA256 8926809c4d7e6c115f6abe6d0c7d0d90e2bdb8eff4a64e8040c7b73bf31ca4fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Quic.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.Quic.dll
        • Size 95KB
        • SHA256 548f325f3e756ab6fe1e1d79a3533eef8eef18edd27f31044e853a4e61c9a8ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Security.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.Security.dll
        • Size 192KB
        • SHA256 f098dc90bded87e1f77206690218cee53f3f89abede420399fa3ea605589f2e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Net.Sockets.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Net.Sockets.dll
        • Size 94KB
        • SHA256 ef0b6c3921a995ad5ab6dfff9249e0ccc9472d924e014950a86df6cd15335418
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.ObjectModel.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.ObjectModel.dll
        • Size 17KB
        • SHA256 25a359c15be3bfe2bd3cf8662031f8027b98523bce3ed8c023c5131a74a9d391
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.CoreLib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Private.CoreLib.dll
        • Size 2.8MB
        • SHA256 2093bc658763515322ab9359fc6cd030be5c4c34dd919e14eab1618e257aece4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Uri.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Private.Uri.dll
        • Size 74KB
        • SHA256 d7f044cb250a2048b06e5630f4140e7e82f8008edcbe4d6e236dfe0ab3dcffd7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Private.Xml.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Private.Xml.dll
        • Size 1.4MB
        • SHA256 fe8af37950dcec1b60a54b3868fe54affc378cdc8c65e950ceb620250b369b9b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.Numerics.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Runtime.Numerics.dll
        • Size 90KB
        • SHA256 10789858ffb3beb44eb564daece0f54913ea0725041fb1d8c170dd34496da18d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.Serialization.Formatters.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Runtime.Serialization.Formatters.dll
        • Size 17KB
        • SHA256 fa872cf061a9ca1e1107c174b929cf18a2393ef83a851df5071e5c392ea52e19
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Runtime.Serialization.Primitives.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Runtime.Serialization.Primitives.dll
        • Size 5KB
        • SHA256 84ee21ccd2cc85c297f0a2ca051a04317a809716e5eb748d472a91815df8e2db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Security.Claims.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Security.Claims.dll
        • Size 15KB
        • SHA256 da948104f0d0e58c7b10d56166571195050f3bf02a238228bd00f59b180bb57e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Security.Cryptography.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Security.Cryptography.dll
        • Size 255KB
        • SHA256 e1885827fd8ed39a0b30775dded2b485c3a3cd39b79c43db0a89ad3a6142b055
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.Security.Principal.Windows.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\DeepRedBot\nl1qKUEHQau4\System.Security.Principal.Windows.dll
        • Size 48KB
        • SHA256 8fe634304196771c51a7a7f404008a878d4a2cf072e715575d675a9910b1f200
        • MD5 SHA1 SHA512 SSDEEP TLSH