General
- Target bot.exe
- Size 73.8MB
- Sample260705-x2fmpsfs7s
- SHA256 a7ec2ef4e8e088ba288803d5faaa175bc8d4637be77f35cd6a308a70b4d690fc
- MD5 3bbab0d83a4920458a2367a97bed4cd9
- SHA1 fb2eab2ac9f4704527f4528ede96ff23c5418204
- SHA512 6e2b52683faee324db6561b37fd6acdc21c6a51f25b9179f4240e6efdfcafac390a6b2cb9bb1ed90825b3cdb49a4818476b7b681426497c9fa40e399445762dc
- SSDEEP 1572864:RvUMOtNWo+dy2J0f0/rBdsG7bpip0WWPiIrK4cNhZHyG3ql:VUXvrI5BB7tE0Wme4cbFyQql
- TLSH T19A083305CD125A5EE34D9736E2E1D9273BD3208B866A80DD1BD04E479F6B1DADE38C23
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
bot.exe
Resource
win10v2004-20260513-en
4 signatures
300 seconds
Behavioral task
behavioral2
Sample
bot.exe
Resource
win11ltsc2024-20260629-en
16 signatures
300 seconds
Malware Config
Targets
-
- Target bot.exe
- Size 73.8MB
- SHA256 a7ec2ef4e8e088ba288803d5faaa175bc8d4637be77f35cd6a308a70b4d690fc
- MD5 3bbab0d83a4920458a2367a97bed4cd9
- SHA1 fb2eab2ac9f4704527f4528ede96ff23c5418204
- SHA512 6e2b52683faee324db6561b37fd6acdc21c6a51f25b9179f4240e6efdfcafac390a6b2cb9bb1ed90825b3cdb49a4818476b7b681426497c9fa40e399445762dc
- SSDEEP 1572864:RvUMOtNWo+dy2J0f0/rBdsG7bpip0WWPiIrK4cNhZHyG3ql:VUXvrI5BB7tE0Wme4cbFyQql
- TLSH T19A083305CD125A5EE34D9736E2E1D9273BD3208B866A80DD1BD04E479F6B1DADE38C23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1