General
- Target 11_19_mhs-bot-pw-2.rar
- Size 322KB
- Sample260724-gynwxatcjf
- SHA256 e96bdf382ac25e08c0a82d30880d36b4fb680d7f871f764023d74cb36e37f3d3
- MD5 6c2145bc795d6ba44e38766005050785
- SHA1 7e8551f27cc354902a6afa182e7ebec4fc5c51cf
- SHA512 0c810c5f2f61877121711e87bdc72237921303c517a4e00b30036acc73730ed45a27c48686a3e494deef81f99ea608d6fa031711372fdb781a36bab00f0c38d0
- SSDEEP 6144:EcD4kbzZYPktT8xHc4EDyEohiCHPYtTof5g5MdMScL9oa54271dz:EcD4qzZYv1cgpwCfleZ71d
- TLSH T1A36423426A7A53D1F47DFBB7B4C401AD9FE8CF899CA6628C4C7D4920C229F563E941B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
MHS-Bot-PW 2.3 With Country Memory Customizer And Source Code/MHS-Bot-PW 2.3 With Country Memory Customizer (Source Code).ps1
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
MHS-Bot-PW 2.3 With Country Memory Customizer And Source Code/MHS-Bot-PW 2.3 With Country Memory Customizer (Source Code).ps1
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
MHS-Bot-PW 2.3 With Country Memory Customizer And Source Code/MHS-Bot-PW 2.3 With Country Memory Customizer (Source Code).exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target MHS-Bot-PW 2.3 With Country Memory Customizer And Source Code/MHS-Bot-PW 2.3 With Country Memory Customizer (Source Code).au3
- Size 54KB
- SHA256 cd94f9225ab43b933545df3ffcc9a1f33c6f57ee237ede3e9a0184a04619ec6f
- MD5 906d09581ed392909dc5fa4c1767b947
- SHA1 15cb00a524024cd5d2a908cf4811b74633c70f4f
- SHA512 1cec26e5191e4944212b99250b83642b97759a275b8600949f5b2970b0679c1df65b33d2bcdacd71f2a4b5a7a20b96e7c6781812dfce3c8deedce19f2afe0fbf
- SSDEEP 1536:IEQsyHGG8oxDpPPnPXPPP/PasRP5PaP4PXiCPtPDPHPs:68oxDpqsliZ
- TLSH T1094350A2EF7B1C81E152969A0633DCCABB6F481FB95D110938BE7C48130F89D514E6F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target MHS-Bot-PW 2.3 With Country Memory Customizer And Source Code/MHS-Bot-PW 2.3 With Country Memory Customizer (Source Code).exe
- Size 309KB
- SHA256 060a8a84a391440467a8c146c194d1695580fe1977fc30391548a67f24edf303
- MD5 a1c64d9a7723980fd8a9672f9917234a
- SHA1 18c95e0b04d8f72a47a4e102919c95bd758142ad
- SHA512 462d81a32befc90b990a51111d87fec429392c310573441d86c7bb2a8c70f54a996e084a2bdffebcc49d497c7e2c80efddfef83b80c15ba355ac5c0682cd6b71
- SSDEEP 6144:LknN4CVUIm6uk06ZLYgvBA+8xmrxgmA+3cclptVopAP1iNIkON6VRKHJ7:InNhuBoY8SorxgmA+nlvVl8N9ON6rs
- TLSH T11564238165B4192BF65B03BF28A7877B5767F1C087B1336640332D6BAB34CE69C342A4
- MD5 SHA1 SHA512 SSDEEP TLSH
AutoIT Executable
AutoIT scripts compiled to PE executables.