Extracted

• • Target
    INSTALAR.bat
  • Size 1KB
  • SHA256 64b4485d72dbc3d1c853a117da52c9c670af0ebea9547564bd8deaaff7b8838b
  • MD5 14fc3d13429ea75a9d0dfc6265db9d1b
  • SHA1 d0aa326ccb5a01ac551e3dda6c5fbe562fa80b8e
  • SHA512 9a27a7bec0d1d8314ea2236ff26c0113d4c8263f4248f0214f1f89c0e30f69826cf973954042c0e2e311c6b0e1a08ffdfddced8696a602bf8890411f04d908b1
  • TLSH
    T1F84131EB739C8063F6B206AFAF89916F741BA0630889D9DD34454030548F3446BFAAC3
  • MD5 SHA1 SHA512 TLSH

  Score

  8^/10

  execution

  • Downloads MZ/PE file

  behavioral1behavioral2
• • Target
    V-Bot.bat
  • Size 314B
  • SHA256 dd1a056227d4e90a457538555f50f72e2015fda02776e0777eb501fdf1df5705
  • MD5 f1b5a2328c4d8a3c0389e10cf6ed183e
  • SHA1 7d2890cb41398d5523cb19b026351a0407ceb4cd
  • SHA512 564702e1dd8a5ef37646cde48d5e73cc54f0acc111204c33b4d9ad83db76aa4d6afeec008410bcfee27c19d24e7e6bee40ae2e9acc052f3f93f6aabc3531356b
  • TLSH
    T1A6E07D8521045386F873467D81E456B3746FC007023001D030302932740F5C980AAACA
  • MD5 SHA1 SHA512 TLSH

  Score

  8^/10

  executiondiscovery

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Downloads MZ/PE file

  behavioral3behavioral4
• • Target
    V-Bot.exe
  • Size 44KB
  • SHA256 25dfb64f32d5eb81040d2308dd338f65ca1a013e4ccad6cf79b4d2d4dc41661b
  • MD5 21da6b3dc9638a20b1a879cb636d8195
  • SHA1 1802a61f930b87264709da9f7dfc137cacd774b4
  • SHA512 460355ac32723340817e2746ffe44d36f3e37a4ae68c38940bf419855c6800f94e7353ec5655d43b062652e6d95041c57b65902dc66c61eb5226f4106a2eb2de
  • SSDEEP 96:lWQwZrRK6nlhdduzp6PxTrvra8kG9rht5zNt:lWQwnrnlhbdrvJJ7
  • TLSH
    T1B623111B8F77F040FE6A01B18763CA81EE53EFB80510429DA885C679692D534BFE2F16
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  execution

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral5behavioral6
• • Target
    vbot-gui.ps1
  • Size 36KB
  • SHA256 29cfce887ef1e4113dfa990658d032007f89d66550706470e773ea5c7b8c7efb
  • MD5 3aa4b9a9b93020a146f7823b52ee0c67
  • SHA1 e1dc4c2e5bc548b718ccf1983e790fac85bcbafc
  • SHA512 58af6da9919ceb79eab9f187470998b7aae52f26b9019f0c9e8aa57b788de3004e18bb7e3399d5d74ac56ac2a130123b0ad159ecd5bdbe4482b4eb92cc62904e
  • SSDEEP 384:4t1oKnvXWlET20ovDf8CK5zecuxxOAyKnjetwOPSNk3TyDSQu19MtNLpmcxuDeV8:6XgkZsdrTF2I0yXBXKnSpwytfJl5zud
  • TLSH
    T181F2943D321FD1A84B97619FC99BE4829E6611332008DE4536DFE6C4DF8E168C378B59
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  execution
  behavioral7behavioral8
• • Target
    vbot-worker.ps1
  • Size 20KB
  • SHA256 6cd9f9078617c9904af20c143e7c105bb97b4f6e3f114498ada2291794c644f8
  • MD5 077746f97fabb70ee60e8c6d8988afae
  • SHA1 95b73aa310389e10259441f30c7d665b70d4a879
  • SHA512 604b27d9f115dca8753912f809747587f9899971c8df97f0e6223cae13076f51056e91abf4e200dcd3fcf25d277eacbd777bd4b98b731ad1330ff5d624b63698
  • SSDEEP 384:SDQ7eGoKhAE+NkF6qafA5sk7M6DvxI05d2pFmDRZU3N/:jeEviyxa45Zvasd8cDRZU3N
  • TLSH
    T13E92D6293C0A515A21F3933AFDC6811AFE7E002B89064604FABEC5C55FF4B19872DE57
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  execution
  behavioral10behavioral9