loaderbot

General

Target

KeePassPasswordSafe.exe
Size

798KB
Sample

220411-ds4hmagfaq
MD5

aa6862f3eb7a7dec71c20a600154071b
SHA1

0a5b8f313b7cabfd8aa6a353ded073d793954937
SHA256

b4775eb6d51dc4621171d1a378263f93cfe9ce98d98eefd796e5fb24e2c6b25a
SHA512

8f0082847afb4d3a3c38ee4b8e119f044c07e83f2167282d927076ca76cc2aecce177aedf8e2e6a5aba8b1131f0139321de169b5fc509e03f89e27173a35f97f

Score

10^/10

Malware Config

Targets

- Target
  
  KeePassPasswordSafe.exe
- Size
  
  798KB
- MD5
  
  aa6862f3eb7a7dec71c20a600154071b
- SHA1
  
  0a5b8f313b7cabfd8aa6a353ded073d793954937
- SHA256
  
  b4775eb6d51dc4621171d1a378263f93cfe9ce98d98eefd796e5fb24e2c6b25a
- SHA512
  
  8f0082847afb4d3a3c38ee4b8e119f044c07e83f2167282d927076ca76cc2aecce177aedf8e2e6a5aba8b1131f0139321de169b5fc509e03f89e27173a35f97f
Score

10^/10

loaderbot loader miner persistence suricata
- LoaderBot
  LoaderBot is a loader written in .NET downloading and executing miners.
  loader miner loaderbot
- suricata: ET MALWARE CerberTear Ransomware CnC Checkin
  suricata: ET MALWARE CerberTear Ransomware CnC Checkin
  suricata
- LoaderBot executable
- Downloads MZ/PE file
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1

T1060

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

suricata: ET MALWARE CerberTear Ransomware CnC Checkin

LoaderBot executable

Downloads MZ/PE file

Executes dropped EXE

Checks computer location settings

Drops startup file

Loads dropped DLL

Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2