General
- Target Guns.lol viewbot.zip
- Size 71.1MB
- Sample261110-xhwjtaaa49
- SHA256 cafbe5da01b32344cd447db8aebca49f78d2857c12ab19d2eb6d954f0df6e30b
- MD5 f9625c696485abe68c5e29dbba7e014b
- SHA1 cff74b1b2ec7075435a744bc231c440d415bbdcf
- SHA512 6627bfed8383bd229f2caed2a89c15e726e0331b8598a8652d03bbe2168e90f7887e87116b30b3522c0a13e382d399905c6328a4a886d61d8a67ec7375ddaaed
- SSDEEP 1572864:DsRLirIHDwRQPzCNA85F+mZLjZG8gzotu/B+yYbzXDSpcIZ/attN:DsRLirFRQPWaQ+mZo83tuwPTqY
- TLSH T1DBF733B6C43E120CA1009379DF9D8DD2F40FF5926A9A6266E758C7F62C747CB0B97068
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Guns.lol viewbot.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Guns.lol viewbot.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Guns.lol viewbot/Guns.Lol Viewbot 1.0.2.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Guns.lol viewbot/Guns.Lol Viewbot 1.0.2.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Guns.lol viewbot/readme.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Guns.lol viewbot/readme.txt
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Guns.lol viewbot.zip
- Size 71.1MB
- SHA256 cafbe5da01b32344cd447db8aebca49f78d2857c12ab19d2eb6d954f0df6e30b
- MD5 f9625c696485abe68c5e29dbba7e014b
- SHA1 cff74b1b2ec7075435a744bc231c440d415bbdcf
- SHA512 6627bfed8383bd229f2caed2a89c15e726e0331b8598a8652d03bbe2168e90f7887e87116b30b3522c0a13e382d399905c6328a4a886d61d8a67ec7375ddaaed
- SSDEEP 1572864:DsRLirIHDwRQPzCNA85F+mZLjZG8gzotu/B+yYbzXDSpcIZ/attN:DsRLirFRQPWaQ+mZo83tuwPTqY
- TLSH T1DBF733B6C43E120CA1009379DF9D8DD2F40FF5926A9A6266E758C7F62C747CB0B97068
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Guns.lol viewbot/Guns.Lol Viewbot 1.0.2.exe
- Size 71.1MB
- SHA256 4b18fec7cfac43ff92d336ab4cb8b7180679e20a051bedfc8f415bcc153ef9e8
- MD5 497d4b9904e878dea8ff79840241f18c
- SHA1 2eae8d12b6cda1498b2b6e5032aefd4857593704
- SHA512 de954d7b54f54507bacc7415aab7ae6574d383f6c92d9580fd228883a64c9702d5a77d84c09da956b386281296cf88bbc9c363153ea1b9737d2b4d6f41451c78
- SSDEEP 1572864:rhzLa6m9bkDS1Gyz6otLK4d5Zn0mU9onmZNeKIFd1x4pkuJ1e1b:rhzLa6vDS1n+UK4d0mbnmCFTs
- TLSH T10BF7336A883F092CF10487798F9D9AC1F80BF5411AAA7636EB54C4B93C74B8A1F5747C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
- Target Guns.lol viewbot/readme.txt
- Size 305B
- SHA256 7b52be2cd7f3d6039b315b6a2a0ef7422bcd6b2f06dae210d377f743afa4e989
- MD5 14a10ad17bdffc90b4ac0e95e9120953
- SHA1 f89b83f7b445a86757fa75e12bd791720ade1e5a
- SHA512 ceb4c45dc5e66741ebfc93b5c18902575d2e9115cd8eb194ba1b6552e55ca34b4db4ddad11bcc333ec0225b185618088ef6f51cd9aa14d84bdd07e991407a047
- TLSH T1F2E02B386C88E37B02A88AA3764838C6F3C4702CC6704781845162392677F2885BE58D
- MD5 SHA1 SHA512 TLSH
Score1/10
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Network Share Discovery
1Peripheral Device Discovery
1Query Registry
3System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1System Time Discovery
1