General
- Target OSBot.jar
- Size 3.8MB
- Sample260719-enq76sbt6p
- SHA256 5e00075bb7a2e370c5afc7707db44babf7fae80cf6549a759f3334e4064c3e03
- MD5 c775543bdb54ad7baca00c2eb1925771
- SHA1 0e38bc057c3dd2233a02c7f3e9f90a9d74ad8d9c
- SHA512 40510e1e8279910275adab4c2f1bbf233f6da089159953be50f3178eca5f1806bf2509f546f26502233dcd3ba1e488b3095964f8192cc673314f401f4edb66f6
- SSDEEP 98304:7uzclsg2ViS5k6EuoXg0jtLgnDd1e6ITdGV5G7zW8Mvx:74dKSi8oXpjtUnp1epRiGnWz5
- TLSH T16F06F163AEDBC468DA7744B361C792A3293E19B8AC0B90BE43D05D854B60D4B0356FFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OSBot.jar
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
OSBot.jar
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target OSBot.jar
- Size 3.8MB
- SHA256 5e00075bb7a2e370c5afc7707db44babf7fae80cf6549a759f3334e4064c3e03
- MD5 c775543bdb54ad7baca00c2eb1925771
- SHA1 0e38bc057c3dd2233a02c7f3e9f90a9d74ad8d9c
- SHA512 40510e1e8279910275adab4c2f1bbf233f6da089159953be50f3178eca5f1806bf2509f546f26502233dcd3ba1e488b3095964f8192cc673314f401f4edb66f6
- SSDEEP 98304:7uzclsg2ViS5k6EuoXg0jtLgnDd1e6ITdGV5G7zW8Mvx:74dKSi8oXpjtUnp1epRiGnWz5
- TLSH T16F06F163AEDBC468DA7744B361C792A3293E19B8AC0B90BE43D05D854B60D4B0356FFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.