General
- Target IRAQAIMBOT.exe
- Size 15.0MB
- Sample260710-1b9pmsaw2n
- SHA256 95aa89c3876b06d5ee162a5213e55b9dd4770b460b07bc024fa0f4cd8ee2369b
- MD5 2f6096e2b4dc219aa429cc766b9d9542
- SHA1 2fa9c802e3bf4f76ff3646f83d620d420335052b
- SHA512 def8e0af816459a97086ccee3ff3b1f53f1491d50fe89a368211da947689b707f9c3079099f8b80925d09cd1bd4bc62dc5e92454eeacde6867e36ae143483894
- SSDEEP 393216:BsO47aW83pAc02mfCS+abnGCnGjji2bjRo4NeVHxRE6w9AX:QaW8ZAc4aS+knGCnkji2nRDebRE6w9u
- TLSH T15EF633987BC108C9E88A527598E2A573C2D5BD320B98C59B5BF25E150E332F5FF39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
IRAQAIMBOT.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
IRAQAIMBOT.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target IRAQAIMBOT.exe
- Size 15.0MB
- SHA256 95aa89c3876b06d5ee162a5213e55b9dd4770b460b07bc024fa0f4cd8ee2369b
- MD5 2f6096e2b4dc219aa429cc766b9d9542
- SHA1 2fa9c802e3bf4f76ff3646f83d620d420335052b
- SHA512 def8e0af816459a97086ccee3ff3b1f53f1491d50fe89a368211da947689b707f9c3079099f8b80925d09cd1bd4bc62dc5e92454eeacde6867e36ae143483894
- SSDEEP 393216:BsO47aW83pAc02mfCS+abnGCnGjji2bjRo4NeVHxRE6w9AX:QaW8ZAc4aS+knGCnkji2nRDebRE6w9u
- TLSH T15EF633987BC108C9E88A527598E2A573C2D5BD320B98C59B5BF25E150E332F5FF39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (145) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Loads dropped DLL