General
- Target Borion.dll
- Size 6.8MB
- Sample260804-ba2vzazfqc
- SHA256 a6642d8173fa2d962fa89875f0abeb74f40aa3491f03c40f796650beeb595b7a
- MD5 2757a9193431d013ec601bf8341d4f6a
- SHA1 c1f8dbf0552e2b798ee2531c894842087b0ad0d0
- SHA512 35a1863db808f3dca911cb99bd3a20f9ac1340229fdd4473f1985fe1841df67d687d8aa6c62767d4a771dc3f3488618777b16e5ee8187d43f62f0eef76a4059b
- SSDEEP 98304:9ICLWOFNnauOPKlNBr5+jaJnu9V9w75BpWmigLjXNT:qeWOFpSaJ9LxT
- TLSH T1A766D23D25EF05B8E17681F9CED62406DAF33C189320A6C7465C8A9ECE7FE9C65A4C11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Borion.dll
Resource
win11-20260513-en
2 signatures
900 seconds
Malware Config
Targets
-
- Target Borion.dll
- Size 6.8MB
- SHA256 a6642d8173fa2d962fa89875f0abeb74f40aa3491f03c40f796650beeb595b7a
- MD5 2757a9193431d013ec601bf8341d4f6a
- SHA1 c1f8dbf0552e2b798ee2531c894842087b0ad0d0
- SHA512 35a1863db808f3dca911cb99bd3a20f9ac1340229fdd4473f1985fe1841df67d687d8aa6c62767d4a771dc3f3488618777b16e5ee8187d43f62f0eef76a4059b
- SSDEEP 98304:9ICLWOFNnauOPKlNBr5+jaJnu9V9w75BpWmigLjXNT:qeWOFpSaJ9LxT
- TLSH T1A766D23D25EF05B8E17681F9CED62406DAF33C189320A6C7465C8A9ECE7FE9C65A4C11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.