General
- Target agent-windows-amd64-bf2bf385.exe
- Size 12.3MB
- Sample260714-xm2avset3t
- SHA256 5b6c218e9d4f58590340ca3fb61cad1a4139a17621876b7b65b60cd6da04a5a0
- MD5 5fcd2ee28e74bdc1696cf069ee0b8d6f
- SHA1 7bceefb3cfd5b40b2151921a8e8e85db167940b8
- SHA512 9e0a284441ed1a12a0902264a12878fb07d764bb4838d4785eafdd8e6e7a216730a83e6442b25ae5e7ec96ea68a39ebd6bc2f321651f20e2b86d7828bfadbdbb
- SSDEEP 98304:rlYVCyWBUuZ6c9TYMbQQKmrF3vEs469XLUUs2R/DdiHcMJ3Yf6T2:raTWBbf8QKmrpseDdKdw
- TLSH T1A0D64947ED6A09E8C4ADD530C57692637B713C885F2123D72BA0B6742F72BE06EB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
agent-windows-amd64-bf2bf385.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
overlord
C2
-
92.119.165.248:24356
Targets
-
- Target agent-windows-amd64-bf2bf385.exe
- Size 12.3MB
- SHA256 5b6c218e9d4f58590340ca3fb61cad1a4139a17621876b7b65b60cd6da04a5a0
- MD5 5fcd2ee28e74bdc1696cf069ee0b8d6f
- SHA1 7bceefb3cfd5b40b2151921a8e8e85db167940b8
- SHA512 9e0a284441ed1a12a0902264a12878fb07d764bb4838d4785eafdd8e6e7a216730a83e6442b25ae5e7ec96ea68a39ebd6bc2f321651f20e2b86d7828bfadbdbb
- SSDEEP 98304:rlYVCyWBUuZ6c9TYMbQQKmrF3vEs469XLUUs2R/DdiHcMJ3Yf6T2:raTWBbf8QKmrpseDdKdw
- TLSH T1A0D64947ED6A09E8C4ADD530C57692637B713C885F2123D72BA0B6742F72BE06EB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops startup file