Analysis
- max time kernel
150s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/09/2026, 18:00
Behavioral task
behavioral1
Sample
agent-windows-amd64-f108b969.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target agent-windows-amd64-f108b969.exe
- Size 30.3MB
- Sample260908-wlr55awsat
- SHA256 9672d3fed3d30484c38c813279d5c0c2632d48722d688dcdd1a9d45a2d877f2a
- MD5 0e95bcbb271e52bc1ef5a8c1b45c53a3
- SHA1 a12428fd15b6e560832fb62c664ea6662649da14
- SHA512 053b683f75cdb3ae118db2a874e16d3dccc08b4f224ffcab817cae307dd9cae86e0dcfc978122b1aa0861ad230b11b2408cadfc7196b9c72f87bec0744a1568f
- SSDEEP 196608:LthQFb4d5OvawDVMAmet5K0QUObJ9GADJPEHrYwuKUxVnQmhbP2cwwNTVU7d:L/f5OvJp7m39F8HrYcU7FbPDVU7d
- TLSH T143678D47E81509EACA5891B5C9AF8303B374BC041B2667CB2E14B778BDE77C59E7A340
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects Overlord RAT 6 IoCs
resource yara_rule behavioral2/memory/5328-0-0x00007FF764FC0000-0x00007FF768CD7000-memory.dmp family_overlord behavioral2/memory/5328-2-0x00007FF764FC0000-0x00007FF768CD7000-memory.dmp family_overlord behavioral2/memory/5328-5-0x00007FF764FC0000-0x00007FF768CD7000-memory.dmp family_overlord behavioral2/memory/5328-7-0x00007FF764FC0000-0x00007FF768CD7000-memory.dmp family_overlord behavioral2/memory/5328-10-0x00007FF764FC0000-0x00007FF768CD7000-memory.dmp family_overlord behavioral2/memory/5328-13-0x00007FF764FC0000-0x00007FF768CD7000-memory.dmp family_overlord