General
- Target SuperbulletAI 0.3.85.exe
- Size 321.0MB
- Sample260716-nsnsaaby9m
- SHA256 422d759cfed8bdd1ad9bb4849381e979c528cdfa9b7f5d8bee58f6fae1ab1781
- MD5 d55962548a6475e8e1003bbe5b1cfb2a
- SHA1 6932064bdae81fd14eb176b4a7bb5af2d4a27689
- SHA512 9727ff95d5165f743c96398d85ad11c14c2176c4966e7626087a41a0e721781f5df1bdb6de3ffcc9e6f72bcdd9f4f0ba5e5db1a7a91af9d8340248b5481c9e9e
- SSDEEP 6291456:/xesLOG8edPXWL9RFyIA+5ZIEn55Tbopx7pry5x1fkonjRb4QF9V:59iedeL9f2aZIA59bUnyhjnVnV
- TLSH T15DF833E062A0E7A3E075F4325DC9BBE5E294114BF518E0262B60D76E1F6DDE1C62D323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SuperbulletAI 0.3.85.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target SuperbulletAI 0.3.85.exe
- Size 321.0MB
- SHA256 422d759cfed8bdd1ad9bb4849381e979c528cdfa9b7f5d8bee58f6fae1ab1781
- MD5 d55962548a6475e8e1003bbe5b1cfb2a
- SHA1 6932064bdae81fd14eb176b4a7bb5af2d4a27689
- SHA512 9727ff95d5165f743c96398d85ad11c14c2176c4966e7626087a41a0e721781f5df1bdb6de3ffcc9e6f72bcdd9f4f0ba5e5db1a7a91af9d8340248b5481c9e9e
- SSDEEP 6291456:/xesLOG8edPXWL9RFyIA+5ZIEn55Tbopx7pry5x1fkonjRb4QF9V:59iedeL9f2aZIA59bUnyhjnVnV
- TLSH T15DF833E062A0E7A3E075F4325DC9BBE5E294114BF518E0262B60D76E1F6DDE1C62D323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.