General

  • Target

    392cdea2e434db32ed1eb0bd83a40271bd1a6784896cf03d853b5940985e8a78

  • Size

    723KB

  • Sample

    220625-v4d6jsfgc2

  • MD5

    58c57f0bc4267e4670eb8957a92bbff2

  • SHA1

    f938c14e158f61f4f42f66806383cd4ccf0bd88a

  • SHA256

    392cdea2e434db32ed1eb0bd83a40271bd1a6784896cf03d853b5940985e8a78

  • SHA512

    6fbc1d37e07eb9ac750c4c1c3f7f0f186bef32c758e0c571eb04772a63dcf7f8ee36b2cda2ae6c4cd180f9e2e1e226fb7c4c498b4b14c393277a89779570521e

Malware Config

Targets

    • Target

      392cdea2e434db32ed1eb0bd83a40271bd1a6784896cf03d853b5940985e8a78

    • Size

      723KB

    • MD5

      58c57f0bc4267e4670eb8957a92bbff2

    • SHA1

      f938c14e158f61f4f42f66806383cd4ccf0bd88a

    • SHA256

      392cdea2e434db32ed1eb0bd83a40271bd1a6784896cf03d853b5940985e8a78

    • SHA512

      6fbc1d37e07eb9ac750c4c1c3f7f0f186bef32c758e0c571eb04772a63dcf7f8ee36b2cda2ae6c4cd180f9e2e1e226fb7c4c498b4b14c393277a89779570521e

    • BetaBot

      Beta Bot is a Trojan that infects computers and disables Antivirus.

    • Modifies firewall policy service

    • Sets file execution options in registry

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks