General
- Target jaffacakes118_Backdoor.Win32.Agobot.cw.d0e3a01ebd18c8eeadb5b0e9886934b9
- Size 249KB
- Sample261012-3twlvafe63
- SHA256 9eed9d557daa5a56ec02a7659c46b431158aff52db1126204328692abccce616
- MD5 d0e3a01ebd18c8eeadb5b0e9886934b9
- SHA1 125a53de29ec8c9f339459360c5e1e1f1c30b893
- SHA512 af9831781f4ee4043b2bf23884b053d031bc72949f6eedb976518c64fc52dfe969e102c030229c2d25cf5375117f21e15ffd484b7d5b0d9aebbd09f769a22246
- SSDEEP 6144:Tfa9H2MZnARVvpnOdX9i6qn8Wzjb1BUhLUK81xq+UbojzmI7JfqSsd:Ti5NS3vpOji6W8WzjJ88pUbsZ
- TLSH T1D34422144050EF42EDA99A70D8E68F25CCE54AED35C14FEBF90B908358BC319B567637
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_Backdoor.Win32.Agobot.cw.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Backdoor.Win32.Agobot.cw.d0e3a01ebd18c8eeadb5b0e9886934b9
- Size 249KB
- SHA256 9eed9d557daa5a56ec02a7659c46b431158aff52db1126204328692abccce616
- MD5 d0e3a01ebd18c8eeadb5b0e9886934b9
- SHA1 125a53de29ec8c9f339459360c5e1e1f1c30b893
- SHA512 af9831781f4ee4043b2bf23884b053d031bc72949f6eedb976518c64fc52dfe969e102c030229c2d25cf5375117f21e15ffd484b7d5b0d9aebbd09f769a22246
- SSDEEP 6144:Tfa9H2MZnARVvpnOdX9i6qn8Wzjb1BUhLUK81xq+UbojzmI7JfqSsd:Ti5NS3vpOji6W8WzjJ88pUbsZ
- TLSH T1D34422144050EF42EDA99A70D8E68F25CCE54AED35C14FEBF90B908358BC319B567637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory