General
- Target nextbot.exe
- Size 233.4MB
- Sample260721-vv1ces1fmg
- SHA256 b4c9478d7425a2d6d2fe92fc0ec849f6ada63b30a36e1b8633e7d912d36defc2
- MD5 975a1533a1dbb6ed0f4dd52a21c7ec67
- SHA1 02636970f467c6b6132c02e6dc530ff68495b00d
- SHA512 abb463a02e25085bc3097919824dd142d3268a26bdbd638dda68130352c248a3d6054a44889fd317d05e4bdcc11d0e6a1bfeb3bd6f223a1267bec0bbc81925f3
- SSDEEP 6291456:aHnW/HT6QMSamH+lXZ52B/o58bZj2EHYCttyxM/SVMTF:sElFa0+lXZ2/o58bRtyxM/SK
- TLSH T18AC833CA63201F8EC446763A44A6E774A1A1DD27A3D1906F4AE4779304EFC566B3BF30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
nextbot.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
nextbot.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target nextbot.exe
- Size 233.4MB
- SHA256 b4c9478d7425a2d6d2fe92fc0ec849f6ada63b30a36e1b8633e7d912d36defc2
- MD5 975a1533a1dbb6ed0f4dd52a21c7ec67
- SHA1 02636970f467c6b6132c02e6dc530ff68495b00d
- SHA512 abb463a02e25085bc3097919824dd142d3268a26bdbd638dda68130352c248a3d6054a44889fd317d05e4bdcc11d0e6a1bfeb3bd6f223a1267bec0bbc81925f3
- SSDEEP 6291456:aHnW/HT6QMSamH+lXZ52B/o58bZj2EHYCttyxM/SVMTF:sElFa0+lXZ2/o58bRtyxM/SK
- TLSH T18AC833CA63201F8EC446763A44A6E774A1A1DD27A3D1906F4AE4779304EFC566B3BF30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.