General

  • Target

    1dd3fede327fc8776956df5e6e50d84f15375ed6da83c9b75bd69a3cd1709e1c

  • Size

    16KB

  • Sample

    220612-3ah7eafdb9

  • MD5

    42ad66e75de3be4183fef7b937e116c3

  • SHA1

    cf9d1e9b6a3b33907722cbc7fa507663319451a7

  • SHA256

    1dd3fede327fc8776956df5e6e50d84f15375ed6da83c9b75bd69a3cd1709e1c

  • SHA512

    df210b8f30f451d74d096d1b7d99e8e7bf81d5d9affac60358e6452a67ce10c83d9bf183f8cb028fa34f93423cbb20ba3f836c11c232689732142e0a90967eca

  • SSDEEP

    384:Sm9vAPDVH19GTXjdhEPuujYcV6AUwJFZb:SgyRV9Ah6fYcV6Dw9b

Malware Config

Extracted

Family

loaderbot

C2

http://ih892258.myihor.ru/cmd.php

Targets

    • Target

      1dd3fede327fc8776956df5e6e50d84f15375ed6da83c9b75bd69a3cd1709e1c

    • Size

      16KB

    • MD5

      42ad66e75de3be4183fef7b937e116c3

    • SHA1

      cf9d1e9b6a3b33907722cbc7fa507663319451a7

    • SHA256

      1dd3fede327fc8776956df5e6e50d84f15375ed6da83c9b75bd69a3cd1709e1c

    • SHA512

      df210b8f30f451d74d096d1b7d99e8e7bf81d5d9affac60358e6452a67ce10c83d9bf183f8cb028fa34f93423cbb20ba3f836c11c232689732142e0a90967eca

    • SSDEEP

      384:Sm9vAPDVH19GTXjdhEPuujYcV6AUwJFZb:SgyRV9Ah6fYcV6Dw9b

    • LoaderBot

      LoaderBot is a loader written in .NET downloading and executing miners.

    • LoaderBot executable

    • Drops startup file

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks