Overview

overview

10

Static

static

10

0136e18e79...d9.exe

windows7_x64

10

0136e18e79...d9.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0136e18e79051d6549520cb9aa2c1377d12872bed7622b4534e806452d2027d9

  • Size

    16KB

  • Sample

    220523-z2npesbhcn

  • MD5

    df43659131a6e537daa70ee649309f1f

  • SHA1

    c400b4a4678338a9a309dcf13d5e9a36bb2e4f4a

  • SHA256

    0136e18e79051d6549520cb9aa2c1377d12872bed7622b4534e806452d2027d9

  • SHA512

    de3a0994ce02ace7b39ff2b2625f2330813c3e1854adbe9e238823e306ae4667f0a3b7b2fa1a7aa499608ce47b14f838b9ddc6d0c7e9c43e5f9fdb9889cd5052

Score
10/10
loaderbotloaderminerpersistence

Malware Config

Targets

    • Target

      0136e18e79051d6549520cb9aa2c1377d12872bed7622b4534e806452d2027d9

    • Size

      16KB

    • MD5

      df43659131a6e537daa70ee649309f1f

    • SHA1

      c400b4a4678338a9a309dcf13d5e9a36bb2e4f4a

    • SHA256

      0136e18e79051d6549520cb9aa2c1377d12872bed7622b4534e806452d2027d9

    • SHA512

      de3a0994ce02ace7b39ff2b2625f2330813c3e1854adbe9e238823e306ae4667f0a3b7b2fa1a7aa499608ce47b14f838b9ddc6d0c7e9c43e5f9fdb9889cd5052

    Score
    10/10
    loaderbotloaderminerpersistence

    • LoaderBot

      LoaderBot is a loader written in .NET downloading and executing miners.

      loaderminerloaderbot

    • LoaderBot executable

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks