Overview

overview

10

Static

static

10

9ecffc46c6...bb.exe

windows7_x64

10

9ecffc46c6...bb.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ecffc46c622a2f5e1d1478796f70496492471f06015435a2e51b8dc0ae759bb

  • Size

    16KB

  • Sample

    220701-glknqagde9

  • MD5

    b13ff03a1867bbce5a219d053ab08faf

  • SHA1

    b43c892c801a668ef53e9eb16e3742e5b431423c

  • SHA256

    9ecffc46c622a2f5e1d1478796f70496492471f06015435a2e51b8dc0ae759bb

  • SHA512

    21387ca5a82182e6cc1ff188a1b44ac7fa3f9b82be95a74879d78d4eb3d5195ba83338a7497ddf504e45b587694af9de770ec444175fd661a723c6ce6cdf7164

Score
10/10
loaderbotloaderminerpersistence

Malware Config

Targets

    • Target

      9ecffc46c622a2f5e1d1478796f70496492471f06015435a2e51b8dc0ae759bb

    • Size

      16KB

    • MD5

      b13ff03a1867bbce5a219d053ab08faf

    • SHA1

      b43c892c801a668ef53e9eb16e3742e5b431423c

    • SHA256

      9ecffc46c622a2f5e1d1478796f70496492471f06015435a2e51b8dc0ae759bb

    • SHA512

      21387ca5a82182e6cc1ff188a1b44ac7fa3f9b82be95a74879d78d4eb3d5195ba83338a7497ddf504e45b587694af9de770ec444175fd661a723c6ce6cdf7164

    Score
    10/10
    loaderbotloaderminerpersistence

    • LoaderBot

      LoaderBot is a loader written in .NET downloading and executing miners.

      loaderminerloaderbot

    • LoaderBot executable

    • Drops startup file

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks