Overview

overview

10

Static

static

10

0f3c812083...25.exe

windows7_x64

10

0f3c812083...25.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f3c8120834e15002d21e58a743eca4a9475367604fd0b570b9980d719135225

  • Size

    16KB

  • Sample

    220604-tq8mkaagbk

  • MD5

    4bb1908985f7e7187d48135f7134640d

  • SHA1

    c3de2eb8ae7a6799af8690122c2d9e7b2bf9614e

  • SHA256

    0f3c8120834e15002d21e58a743eca4a9475367604fd0b570b9980d719135225

  • SHA512

    4171ec388da7b40bc1dce787cd13b86f4caa7a84db80e19e3b064c170a3bfb6dfa5e7991da82cf42dc4a765301d13e1186d3ab8eb0db7c1401c8087403cd9017

Score
10/10
loaderbotloaderminerpersistencesuricata

Malware Config

Targets

    • Target

      0f3c8120834e15002d21e58a743eca4a9475367604fd0b570b9980d719135225

    • Size

      16KB

    • MD5

      4bb1908985f7e7187d48135f7134640d

    • SHA1

      c3de2eb8ae7a6799af8690122c2d9e7b2bf9614e

    • SHA256

      0f3c8120834e15002d21e58a743eca4a9475367604fd0b570b9980d719135225

    • SHA512

      4171ec388da7b40bc1dce787cd13b86f4caa7a84db80e19e3b064c170a3bfb6dfa5e7991da82cf42dc4a765301d13e1186d3ab8eb0db7c1401c8087403cd9017

    Score
    10/10
    loaderbotloaderminerpersistencesuricata

    • LoaderBot

      LoaderBot is a loader written in .NET downloading and executing miners.

      loaderminerloaderbot

    • suricata: ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses

      suricata: ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses

      suricata

    • LoaderBot executable

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks