General
- Target Borion.dll
- Size 6.8MB
- Sample260703-a79fmsd14r
- SHA256 972ab8cad9731b37b4f6f9af931a44ec2ac4dfedc4b943d75f163d4527984bce
- MD5 fc17c805025edb8ef36f7260ae5adc49
- SHA1 5e97d4fc855b22871767cb7a8383601a42dc2dd9
- SHA512 85a9ff81f2f4c6a4588720d6e1e24a8f5a7c490d36fcacb93ab00fae1fbf7ca8817f125de13f2c586ff3dcfd4cba0dffb40278e7e3d65ef4941f8a11ed210257
- SSDEEP 98304:NbyXgo1ldI42gcUfVng6wd4MAvvpoQvVVh9DIwWm+:NbigcP8Tm+
- TLSH T11E66C23D18EF05B8E17681F8CED625069AF33C189320A6CB465C5E9ECE7FE9C65A4C11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Borion.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Borion.dll
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Borion.dll
- Size 6.8MB
- SHA256 972ab8cad9731b37b4f6f9af931a44ec2ac4dfedc4b943d75f163d4527984bce
- MD5 fc17c805025edb8ef36f7260ae5adc49
- SHA1 5e97d4fc855b22871767cb7a8383601a42dc2dd9
- SHA512 85a9ff81f2f4c6a4588720d6e1e24a8f5a7c490d36fcacb93ab00fae1fbf7ca8817f125de13f2c586ff3dcfd4cba0dffb40278e7e3d65ef4941f8a11ed210257
- SSDEEP 98304:NbyXgo1ldI42gcUfVng6wd4MAvvpoQvVVh9DIwWm+:NbigcP8Tm+
- TLSH T11E66C23D18EF05B8E17681F8CED625069AF33C189320A6CB465C5E9ECE7FE9C65A4C11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.