Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/07/2026, 02:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Kod.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Kod.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target Kod.exe
- Size 113KB
- Sample260721-dbmtjsew71
- SHA256 ae4c021ae0c19883184e72b73303a8ea13f366e2f5decde6f2827904095e9eb4
- MD5 b57be9ca4d57151aaa8068e6ed3290ee
- SHA1 a8aacf737ac90505665f822f53bfa89285bb205e
- SHA512 41a88af7a6cdfd322a72f3b9f2db43dfd4eba90be29c2aab77b7c6815e3ab47e3feac05766da5c3b6762c2d56c112678889ed497ea2babb39785588acecf8234
- SSDEEP 1536:OSKFP9MusRIai228btEWpWTVWBEwAYnvZLXtskjyY/CFVnd1oLUi6e:fO9BsRDjLAoLXGz0WVnZi
- TLSH T102B31A1BBB56407CE191C7BEC9D68D42EB327C4947966BDF07804DB24E96290AF3A303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 discord.com 4 discord.com
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\bot_log.txt
- Size 1KB
- SHA256 b5ee06afdb50cec74b6863089c29a027ceed767db38273222b19b638f34a4f79
- MD5 070ea6a7dc8940a69b794be235152720
- SHA1 e16e248011cf4459e79a731c0872747cd7238931
- SHA512 f4fe70588104f8952357781d2f551ed72e1744fd957d14d8aa367a3a66a9ff95618ddcfb60dd9cc721c3bd47c04d621974e4074484a3ac60a31624035c896b53
- TLSH T198319B69C0293DBB1B40B19AA0AC7EC00F99035F564E0DA0B5FCAB5032D97626712B36
- MD5 SHA1 SHA512 TLSH