General
- Target test_bot.exe
- Size 318KB
- Sample260906-zz71aadc95
- SHA256 4f71ec7b0cb374e7488757a76a6fd391a8401c4082ef6dfbaa199367af002749
- MD5 5ab15c7fdf3b6d3e5b56466f92b94dd0
- SHA1 06304281fc4d61545a3d24975321380b82ffe063
- SHA512 1c70a5e358fae1836998fd0911db904f451dc2ce55cf881aa7c3c622eeccb76a982e6bf253d18cd9bb489b2d576479f826a829f84f3b9bf3ba5d63205e3b9ce1
- SSDEEP 6144:3/9JsP3erbeVkiuWVrbnxCub/tVEs/DqXB4yL5U3B3m9KRr:3/8mQkFW/Cub/vDq+yK5Rr
- TLSH T140643A27E79355F8C257C0348AE6D3B6A571B85C03346F6F5BD8CB322F21E905A29A34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
test_bot.exe
Resource
win10v2004-20260513-en
8 signatures
900 seconds
Behavioral task
behavioral2
Sample
test_bot.exe
Resource
win10ltsc2021-20260513-en
8 signatures
900 seconds
Behavioral task
behavioral3
Sample
test_bot.exe
Resource
win11-20260513-en
7 signatures
900 seconds
Behavioral task
behavioral4
Sample
test_bot.exe
Resource
win11ltsc2024-20260709-en
7 signatures
900 seconds
Malware Config
Targets
-
- Target test_bot.exe
- Size 318KB
- SHA256 4f71ec7b0cb374e7488757a76a6fd391a8401c4082ef6dfbaa199367af002749
- MD5 5ab15c7fdf3b6d3e5b56466f92b94dd0
- SHA1 06304281fc4d61545a3d24975321380b82ffe063
- SHA512 1c70a5e358fae1836998fd0911db904f451dc2ce55cf881aa7c3c622eeccb76a982e6bf253d18cd9bb489b2d576479f826a829f84f3b9bf3ba5d63205e3b9ce1
- SSDEEP 6144:3/9JsP3erbeVkiuWVrbnxCub/tVEs/DqXB4yL5U3B3m9KRr:3/8mQkFW/Cub/vDq+yK5Rr
- TLSH T140643A27E79355F8C257C0348AE6D3B6A571B85C03346F6F5BD8CB322F21E905A29A34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.