General

  • Target
    install.exe
  • Size 10.9MB
  • Sample260720-vnb19ag12m
  • SHA256 965c51f1dffeb13f493e251bed18cf850c67e3f2c1695a4542f27dd0c81b2326
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://nodejs.org/dist/v24.15.0/node-v24.15.0-win-x64.zip

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://github.com/QuestPilot/Microsoft-Rewards-Bot/archive/refs/heads/main.zip

Targets

    • Target
      install.exe
    • Size 10.9MB
    • SHA256 965c51f1dffeb13f493e251bed18cf850c67e3f2c1695a4542f27dd0c81b2326
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks