Analysis
- max time kernel
148s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/07/2026, 22:23
Behavioral task
behavioral1
Sample
bot.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bot.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target bot.exe
- Size 28KB
- Sample260709-2a3qdabv5w
- SHA256 8cf78b5302465e2bdf598e9a892457b3f5bdad84e948370dd827aeae1864aa35
- MD5 05c7e6248be38e92ba7a967da8975535
- SHA1 6c44a72060726d5f2c81e3bcc5817b34ebe2e35d
- SHA512 c491a076051cecda7277b4d9ea89ae904cfb506860a816ff7a9ed6199a5c7d505ef3be320aa3ef99d8e1b9d9b9f5ce2f6971e45c2851c45cffa526dcd7f17d0e
- SSDEEP 768:bdLz8G8HXS/XWaOfFIR+Y63Vb7JR/p5DupIwlTvUBjpP:REzkXWaOqRLCB7zDEIwlTvW
- TLSH T132D2E1DF4B5D64F8C49193F2006AB510F523347649A79B1BC1EA3AEEE9BFD086A11321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 discord.com 3 discord.com -
resource yara_rule behavioral2/memory/1064-0-0x00007FF6F4060000-0x00007FF6F407D000-memory.dmp upx behavioral2/memory/1064-1-0x00007FF6F4060000-0x00007FF6F407D000-memory.dmp upx behavioral2/memory/1064-2-0x00007FF6F4060000-0x00007FF6F407D000-memory.dmp upx behavioral2/memory/1064-3-0x00007FF6F4060000-0x00007FF6F407D000-memory.dmp upx behavioral2/memory/1064-4-0x00007FF6F4060000-0x00007FF6F407D000-memory.dmp upx behavioral2/memory/1064-6-0x00007FF6F4060000-0x00007FF6F407D000-memory.dmp upx behavioral2/memory/1064-7-0x00007FF6F4060000-0x00007FF6F407D000-memory.dmp upx behavioral2/memory/1064-11-0x00007FF6F4060000-0x00007FF6F407D000-memory.dmp upx