Overview
overview
10Static
static
10botnetc2.rar
windows10-2004-x64
8botnetc2.rar
windows10-ltsc_2021-x64
1botnetc2.rar
windows11-21h2-x64
1botnetc2.rar
windows11-ltsc_2024-x64
1botnetc2.exe
windows10-2004-x64
8botnetc2.exe
windows10-ltsc_2021-x64
10botnetc2.exe
windows11-21h2-x64
8botnetc2.exe
windows11-ltsc_2024-x64
10�q�W�l.pyc
windows10-2004-x64
�q�W�l.pyc
windows10-ltsc_2021-x64
�q�W�l.pyc
windows11-21h2-x64
�q�W�l.pyc
windows11-ltsc_2024-x64
readme.txt
windows10-2004-x64
1readme.txt
windows10-ltsc_2021-x64
1readme.txt
windows11-21h2-x64
3readme.txt
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
07/08/2026, 01:57
Behavioral task
behavioral1
Sample
botnetc2.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
botnetc2.rar
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
botnetc2.rar
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
botnetc2.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
botnetc2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
botnetc2.exe
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral7
Sample
botnetc2.exe
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
botnetc2.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
�q�W�l.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
�q�W�l.pyc
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral11
Sample
�q�W�l.pyc
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
�q�W�l.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
readme.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
readme.txt
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral15
Sample
readme.txt
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
readme.txt
Resource
win11ltsc2024-20260709-en
General
- Target botnetc2.rar
- Size 10.0MB
- Sample260807-cdhf6sem4y
- SHA256 2fe9414ac8f5a460243c068cf04bfbbc155eaaaa96c2ca74b50c37d96417c73e
- MD5 bdc731d3fb13584548ecfda9761f1ba9
- SHA1 b822d12f98e805da7bf387cacb33025d870e4ea4
- SHA512 a34558253f07c95a2a56856380087b7a2edb7cbcc0011261f717a5f28fac2d22a712fd4d398eedc62bb02ed2496f229e739ce3b7cb8712d310923b1bc84fd44f
- SSDEEP 196608:DdnBtgzNxBZjfGUSz5784KjLctEqTwe/OoIaJMV7jL8:JB0P1Gi4BEqc4UaJWjw
- TLSH T171B633125CCF3F6EDE84A17EFA4D94ED40E11130484B9E23AE3BC6ACF6A365141995EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1308 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1308 7zFM.exe Token: 35 1308 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1308 7zFM.exe