Overview

overview

10

Static

static

10

p2_MALWARE.exe

windows7_x64

10

p2_MALWARE.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35db927a19c01b9f96efac8c027d7efea422cdbb7dbb81fdb7b6f9e415b8b5ef

  • Size

    7KB

  • Sample

    220626-2stv7afec6

  • MD5

    d53177566b2353326a19c9e8b447be59

  • SHA1

    3a80b4121fd03eec8ce8f74d774bf0a3d9e69ed2

  • SHA256

    35db927a19c01b9f96efac8c027d7efea422cdbb7dbb81fdb7b6f9e415b8b5ef

  • SHA512

    39a5da7fe1793239a91f1a4dfdd36c821bde57f8682b2a1f3ed8c3ee58315e5e84cfd054d09762dd7ca06d7bf61b46ddb14cfbc635abf307cafd46891570b449

Score
10/10
loaderbotloaderminerpersistence

Malware Config

Targets

    • Target

      p2_MALWARE.exe

    • Size

      16KB

    • MD5

      69883cd448e52fa2ffcd181f5b767665

    • SHA1

      6f20034d07e405929e58187f8373bfca80778d88

    • SHA256

      b038f02fce2c8584b6d610ef74cd884821c14570c388f441270ba0efef9ff7e1

    • SHA512

      6dc0cf81015cf441549757a4c9c0d83d9079599e598248c90c9d00d6f07721f848fcc89db216f10bae5f3086acf923b1712c4f4adaa80da7d7129ce277959df6

    Score
    10/10
    loaderbotloaderminerpersistence

    • LoaderBot

      LoaderBot is a loader written in .NET downloading and executing miners.

      loaderminerloaderbot

    • LoaderBot executable

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks