General
- Target DeepRedBot.exe
- Size 36.1MB
- Sample260704-aqsfsshx7z
- SHA256 910c3e7e76e3b6e49fdfcae766e418abf27b14c33bbf642dc6a0d868132048bd
- MD5 80d6eac4aa36f3598c7062a68a5e11a5
- SHA1 b6be3a8856d6226b845738a2850dec1fbf911eb2
- SHA512 9f992405a5ad0ca8c1f74f447ce956a8795ffc3877d74880ed3db3b97955ce09a1794081134c8945d0c0b736da8f3182f7c77da4a0771dc0df83473f5d1f9d1d
- SSDEEP 786432:82TDpMtZdBlkSZFsmyIuFFIdXkLEgkcERE+Z89Onzs:D2ZLCSrslI0IlkoBE+3Q
- TLSH T137871256E2FD00E8D5BAC0B8C6575517E7B234591334A7EB52A08A692F37FE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DeepRedBot.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target DeepRedBot.exe
- Size 36.1MB
- SHA256 910c3e7e76e3b6e49fdfcae766e418abf27b14c33bbf642dc6a0d868132048bd
- MD5 80d6eac4aa36f3598c7062a68a5e11a5
- SHA1 b6be3a8856d6226b845738a2850dec1fbf911eb2
- SHA512 9f992405a5ad0ca8c1f74f447ce956a8795ffc3877d74880ed3db3b97955ce09a1794081134c8945d0c0b736da8f3182f7c77da4a0771dc0df83473f5d1f9d1d
- SSDEEP 786432:82TDpMtZdBlkSZFsmyIuFFIdXkLEgkcERE+Z89Onzs:D2ZLCSrslI0IlkoBE+3Q
- TLSH T137871256E2FD00E8D5BAC0B8C6575517E7B234591334A7EB52A08A692F37FE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.