General
- Target install.exe
- Size 10.9MB
- Sample260720-vnb19ag12m
- SHA256 965c51f1dffeb13f493e251bed18cf850c67e3f2c1695a4542f27dd0c81b2326
- MD5 d344edc4290d464148483000fe6b1bd8
- SHA1 fd9e43032cece4a84013b0ef3d857964f5d7754b
- SHA512 25fe374feb0050c5cea6b7cbbd500fc6a89632d6c5c8b057da7b972f5434bbf7f3764ec65048c6943fb776527849ee9d03e8550e277b1502d61876786105f0f8
- SSDEEP 196608:nfBUGiG0W8UApnGCxdGjP599i2bjKVPy2wEP4Jkz9Rwpr2Zwl61BmZEQOQQCYhvG:nfBU7xW8JnGCnGjb9i2bjRoPLwq7OEbi
- TLSH T1BAC6338BBBC207D4E89B923988D15566B273BD31C7A4858B53A57B210D732EDEC2473C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
install.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
install.exe
Resource
android-35-x64-arm64-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
install.exe
Resource
macos-20250619-en
0 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://nodejs.org/dist/v24.15.0/node-v24.15.0-win-x64.zip
Extracted
Language
-
ps1
Source
URLs
-
exe.dropper
https://github.com/QuestPilot/Microsoft-Rewards-Bot/archive/refs/heads/main.zip
Targets
-
- Target install.exe
- Size 10.9MB
- SHA256 965c51f1dffeb13f493e251bed18cf850c67e3f2c1695a4542f27dd0c81b2326
- MD5 d344edc4290d464148483000fe6b1bd8
- SHA1 fd9e43032cece4a84013b0ef3d857964f5d7754b
- SHA512 25fe374feb0050c5cea6b7cbbd500fc6a89632d6c5c8b057da7b972f5434bbf7f3764ec65048c6943fb776527849ee9d03e8550e277b1502d61876786105f0f8
- SSDEEP 196608:nfBUGiG0W8UApnGCxdGjP599i2bjKVPy2wEP4Jkz9Rwpr2Zwl61BmZEQOQQCYhvG:nfBU7xW8JnGCnGjb9i2bjRoPLwq7OEbi
- TLSH T1BAC6338BBBC207D4E89B923988D15566B273BD31C7A4858B53A57B210D732EDEC2473C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL