Extracted

• • Target

    15e909664fdf26f6931b1279a23f34171ee05be7c6a05344bfe57615b9f6eb2f

  • Size

    16KB

  • MD5

    8171027ea7792c08b7eeb867ea74bb97

  • SHA1

    64d974727efd8bf097b610a71f9e5ccfee36eee0

  • SHA256

    15e909664fdf26f6931b1279a23f34171ee05be7c6a05344bfe57615b9f6eb2f

  • SHA512

    e82af8371e00701441b5be9efa8d1918286e59400172ba52c4b07ff48e9ad1c572aa570ea12694b84d4a763bb4fba8e7f269052293691fd85da7bf273a331632

  • SSDEEP

    384:FqhvzPUmH19GTXjdhj0uujYcV6AUwJFZb:FYrjV9AhYfYcV6Dw9b

  Score

  10^/10

  loaderbotloaderminerpersistencesuricata

  • LoaderBot

    LoaderBot is a loader written in .NET downloading and executing miners.

    loaderminerloaderbot

  • suricata: ET MALWARE CerberTear Ransomware CnC Checkin

    suricata: ET MALWARE CerberTear Ransomware CnC Checkin

    suricata

  • LoaderBot executable

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2