254f32e153f83e5f32060d270402ecfbdd5ee0d9088276d81abd24c2e13ba7ea

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/07/2026, 04:57

Target
BotMonster_v2.8/data/mapper.exe
Size 817KB
Sample260712-flcsfacz5j
SHA256 254f32e153f83e5f32060d270402ecfbdd5ee0d9088276d81abd24c2e13ba7ea
MD5 fc4ce1e98125e7e30af6bc2d4a10250d
SHA1 cc7e3f18771a3944cb08eca03ae7d5062b911ffd
SHA512 22f9eed7ed428b143cee4b798ad63d56880e2aba8454d62e56045afc9c2e86e64534a9431440ded5db0292626efe5f7891ef79bca629e93df9b8b699ce4cd525
SSDEEP 24576:b5P4lGLbMMHMMMvMMZMMMKzb6XmMMMiMMMz8JMMHMMM6MMZMMMeXNMMzMMMUMMVd:bHMMHMMMvMMZMMMlmMMMiMMMYJMMHMML
TLSH
T199056C42F7C8D495E0B706318933CB654672FC659E20866F3199771E2E723C36AB2E1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

adware spyware

Modifies Internet Explorer settings 1 TTPs 1 IoCs

Modify Registry

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Software\Microsoft\Internet Explorer\Main	mapper.exe

C:\Users\Admin\AppData\Local\Temp\BotMonster_v2.8\data\mapper.exe
"C:\Users\Admin\AppData\Local\Temp\BotMonster_v2.8\data\mapper.exe"
1⤵
- Modifies Internet Explorer settings
PID:952

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact