General
- Target bot.exe
- Size 20.5MB
- Sample260723-psbndscn9t
- SHA256 a2769b998694fa4123f2a2839958347c1a3e6bc207442b9a620c6de3b603e34d
- MD5 6eeb4b94df1b6728100d4ee2e607bcc3
- SHA1 f7cb3724368f44edd23014dea648bae7b258cf10
- SHA512 881eb9c844eb0ac5126c6be1bcc4a0843079a77641d9695b23657570c38575c32abeb8ca00003c911839a1f274fce7270d319b718d846efb82c651bf1dbb1ae2
- SSDEEP 393216:QhL1FT8AXEAphVt4alLV+IwQSg+OeXjboXteLogodjPZvk7d3KuClN:wp9pRphRlLV+Bo+OajbkU0godhvk7de
- TLSH T1F52733D8B7454C58F8AF023D68D48E6492F1B5A01F9AC6DF1AF10D841C7B1D9EE3C6A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
bot.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
bot.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target bot.exe
- Size 20.5MB
- SHA256 a2769b998694fa4123f2a2839958347c1a3e6bc207442b9a620c6de3b603e34d
- MD5 6eeb4b94df1b6728100d4ee2e607bcc3
- SHA1 f7cb3724368f44edd23014dea648bae7b258cf10
- SHA512 881eb9c844eb0ac5126c6be1bcc4a0843079a77641d9695b23657570c38575c32abeb8ca00003c911839a1f274fce7270d319b718d846efb82c651bf1dbb1ae2
- SSDEEP 393216:QhL1FT8AXEAphVt4alLV+IwQSg+OeXjboXteLogodjPZvk7d3KuClN:wp9pRphRlLV+Bo+OajbkU0godhvk7de
- TLSH T1F52733D8B7454C58F8AF023D68D48E6492F1B5A01F9AC6DF1AF10D841C7B1D9EE3C6A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.