Overview

overview

10

Static

static

bcaaf37e0b...44.exe

windows7_x64

10

bcaaf37e0b...44.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bcaaf37e0beb6717d01b175e6bc78c44

  • Size

    3.8MB

  • Sample

    220412-jgdeysggbq

  • MD5

    bcaaf37e0beb6717d01b175e6bc78c44

  • SHA1

    6ed8bd63cca483dd9e8bd742fd79d76bc87beccc

  • SHA256

    c8da163b0c84637e8e40fb15add10d77ef3853af773f88bec56ff5a03c40e5ad

  • SHA512

    481fd0295bb83951efac8b6c67d94ef5bee0255258855f16b103f6b846813f27ef697cddde12b3fc5b2b956de94cdb6dbba10a525fa617c6ef91180f0b690b9f

Score
10/10
loaderbotloaderminerpersistencesuricata

Malware Config

Targets

    • Target

      bcaaf37e0beb6717d01b175e6bc78c44

    • Size

      3.8MB

    • MD5

      bcaaf37e0beb6717d01b175e6bc78c44

    • SHA1

      6ed8bd63cca483dd9e8bd742fd79d76bc87beccc

    • SHA256

      c8da163b0c84637e8e40fb15add10d77ef3853af773f88bec56ff5a03c40e5ad

    • SHA512

      481fd0295bb83951efac8b6c67d94ef5bee0255258855f16b103f6b846813f27ef697cddde12b3fc5b2b956de94cdb6dbba10a525fa617c6ef91180f0b690b9f

    Score
    10/10
    loaderbotloaderminerpersistencesuricata

    • LoaderBot

      LoaderBot is a loader written in .NET downloading and executing miners.

      loaderminerloaderbot

    • suricata: ET MALWARE CerberTear Ransomware CnC Checkin

      suricata: ET MALWARE CerberTear Ransomware CnC Checkin

      suricata

    • LoaderBot executable

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks