betabot | 48ee79a7379d43d060969a9909836f4b3236c55ec551d1b33dd97c1c35f57a59 | Triage

Submit
Reports

Overview

overview

Static

static

1

G-00923 SC...NG.exe

windows7_x64

G-00923 SC...NG.exe

windows10_x64

Sharing

General

Target

G-00923 SCHEMATIC DRAWING.exe
Size

394KB
Sample

201009-azdjh3x2as
MD5

b11bd28d54e471b569bf6a7c3667314b
SHA1

86a1f4a6dacfb53c209ec2c083b78927b9817386
SHA256

48ee79a7379d43d060969a9909836f4b3236c55ec551d1b33dd97c1c35f57a59
SHA512

9b4bae35e16a4effe56592d00d8633ee456a48164787440e71fd9da8bb973f2389b1e328cf3370012bba361fdb8977f1edf23056425b197126b4c96667683f35

Score

10^/10

betabot backdoor botnet evasion persistence trojan

Static task

static1

Behavioral task

behavioral1

Sample

G-00923 SCHEMATIC DRAWING.exe

Resource

win7

persistence evasion trojan backdoor botnet betabot

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

G-00923 SCHEMATIC DRAWING.exe

Resource

win10v200722

evasion trojan backdoor botnet betabot persistence

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  G-00923 SCHEMATIC DRAWING.exe
- Size
  
  394KB
- MD5
  
  b11bd28d54e471b569bf6a7c3667314b
- SHA1
  
  86a1f4a6dacfb53c209ec2c083b78927b9817386
- SHA256
  
  48ee79a7379d43d060969a9909836f4b3236c55ec551d1b33dd97c1c35f57a59
- SHA512
  
  9b4bae35e16a4effe56592d00d8633ee456a48164787440e71fd9da8bb973f2389b1e328cf3370012bba361fdb8977f1edf23056425b197126b4c96667683f35
Score

10^/10

persistence evasion trojan backdoor botnet betabot
- BetaBot
  Beta Bot is a Trojan that infects computers and disables Antivirus.
  trojan backdoor botnet betabot
- Modifies firewall policy service
  evasion
- Sets file execution options in registry
  persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Drops desktop.ini file(s)
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

persistenceevasiontrojanbackdoorbotnetbetabot

behavioral2

evasiontrojanbackdoorbotnetbetabotpersistence

© 2018-2024

Terms | Privacy