General
- Target bot_x64.exe
- Size 57KB
- Sample260831-g29yjsweld
- SHA256 eb4c2dc7db21d6a8a889c74c7b90eaac0e095205063ae3e348a400e253c6bdd8
- MD5 51242d1f06d41c80ea8c6fa541be3d6e
- SHA1 a01f91e44b2a59f24b9e9c72e46e2207b6f86526
- SHA512 bc7bde4ea9431f0e7c5345ea9cd1da7ec2f6a27da9f0bcfbd86b15dcfb2df3f416603d29986b849668b5e85c73678b76ad518d98cdecc6b8ae504a284fd90ff6
- SSDEEP 1536:sKWHka5dALVp1V8YJVqJMX0jl0w15GXC0rOB7CD:sKm5dAppRdX0jlP1wT0E
- TLSH T184433A58A6DE624DD836D4B5D6A5D333FBA3F8427235974F0132C91E0F22B26BD28E05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
bot_x64.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
bot_x64.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
solaris_loader
C2
-
196.251.107.186
-
192.162.199.186
-
196.251.107.163
Targets
-
- Target bot_x64.exe
- Size 57KB
- SHA256 eb4c2dc7db21d6a8a889c74c7b90eaac0e095205063ae3e348a400e253c6bdd8
- MD5 51242d1f06d41c80ea8c6fa541be3d6e
- SHA1 a01f91e44b2a59f24b9e9c72e46e2207b6f86526
- SHA512 bc7bde4ea9431f0e7c5345ea9cd1da7ec2f6a27da9f0bcfbd86b15dcfb2df3f416603d29986b849668b5e85c73678b76ad518d98cdecc6b8ae504a284fd90ff6
- SSDEEP 1536:sKWHka5dALVp1V8YJVqJMX0jl0w15GXC0rOB7CD:sKm5dAppRdX0jlP1wT0E
- TLSH T184433A58A6DE624DD836D4B5D6A5D333FBA3F8427235974F0132C91E0F22B26BD28E05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE