General

  • Target

    3ea4b5a3917bdb325dfbc286ba3160e14f5d1df9e81226cb0ecc3868aa00fe5c

  • Size

    636KB

  • Sample

    220701-gxg2zafcdk

  • MD5

    757f63b54e240105d0b41e394e9bd05c

  • SHA1

    265b41ae2e5079823915821e26570a1026456276

  • SHA256

    3ea4b5a3917bdb325dfbc286ba3160e14f5d1df9e81226cb0ecc3868aa00fe5c

  • SHA512

    6481683cd4315c4079943024ae5fe0a1d7b735abfbe2a8b95cf9d08a703398cc557ee355d8a1df3aaaf4e124161aba379fb0b2f7b4827a25fee92f153952e45b

Malware Config

Targets

    • Target

      3ea4b5a3917bdb325dfbc286ba3160e14f5d1df9e81226cb0ecc3868aa00fe5c

    • Size

      636KB

    • MD5

      757f63b54e240105d0b41e394e9bd05c

    • SHA1

      265b41ae2e5079823915821e26570a1026456276

    • SHA256

      3ea4b5a3917bdb325dfbc286ba3160e14f5d1df9e81226cb0ecc3868aa00fe5c

    • SHA512

      6481683cd4315c4079943024ae5fe0a1d7b735abfbe2a8b95cf9d08a703398cc557ee355d8a1df3aaaf4e124161aba379fb0b2f7b4827a25fee92f153952e45b

    • BetaBot

      Beta Bot is a Trojan that infects computers and disables Antivirus.

    • Modifies firewall policy service

    • Sets file execution options in registry

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks