Overview
overview
6Static
static
3viewbot.zip
windows10-2004-x64
1viewbot.zip
windows11-ltsc_2024-x64
1viewbot/0x...ot.exe
windows10-2004-x64
3viewbot/0x...ot.exe
windows11-ltsc_2024-x64
3viewbot/go.mod
windows10-2004-x64
6viewbot/go.mod
windows11-ltsc_2024-x64
1viewbot/go.sum
windows10-2004-x64
3viewbot/go.sum
windows11-ltsc_2024-x64
3viewbot/main.js
windows10-2004-x64
3viewbot/main.js
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/07/2026, 18:06
Static task
static1
Behavioral task
behavioral1
Sample
viewbot.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
viewbot.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
viewbot/0x21 viewbot.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
viewbot/0x21 viewbot.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
viewbot/go.mod
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
viewbot/go.mod
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
viewbot/go.sum
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
viewbot/go.sum
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
viewbot/main.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
viewbot/main.js
Resource
win11ltsc2024-20260709-en
General
- Target viewbot/go.mod
- Size 218B
- Sample260723-wpwygstgrb
- SHA256 946ff61e139546b0e1eda8a74e70fec67a99e8f8f60a71a9035d4b5f4ab5b303
- MD5 bd05a3a1988217b3fc1b7c33803561cd
- SHA1 12c09520bdf2d995704d7fe9fdb992960c830636
- SHA512 8604dc779d5641de906d5c7ea13a9fbddf6cc81b01ce29b93f52ab26bfede29419a4537bdb791dad5771239698e24ac53fe34c031b2c2ff61ffaa2ed53bed3ae
- TLSH T1C2D0A79067D868C93A1144C4D44640004EF1C060BF6DE1BC1CB32974946A491434E523
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1764 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1764 vlc.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 1764 vlc.exe 1764 vlc.exe 1764 vlc.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1764 vlc.exe 1764 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1764 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\viewbot\go.mod"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1764