Overview

overview

10

Static

static

10

49555ffb1a...6d.exe

windows7_x64

10

49555ffb1a...6d.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49555ffb1acfd634bb20aab6bbb9aa3b7d953db6984949f7336668c9429fa86d

  • Size

    3.3MB

  • Sample

    220714-aem2yadafm

  • MD5

    b4cc346bf020b471e0c3a670857e34b0

  • SHA1

    298c8b97b14dd90efe7c5f0143637976d4b7d1de

  • SHA256

    49555ffb1acfd634bb20aab6bbb9aa3b7d953db6984949f7336668c9429fa86d

  • SHA512

    e9aa62b1fb6ce5a06374a235d357ce1e2b74b0b0f4ffb5109a9653f54338874b23b49c57c328071e3ea44c74bb86032314d818bd37da2dd6bdd3dbd27f99ebfd

Score
10/10
saintbotdropper

Malware Config

Targets

    • Target

      49555ffb1acfd634bb20aab6bbb9aa3b7d953db6984949f7336668c9429fa86d

    • Size

      3.3MB

    • MD5

      b4cc346bf020b471e0c3a670857e34b0

    • SHA1

      298c8b97b14dd90efe7c5f0143637976d4b7d1de

    • SHA256

      49555ffb1acfd634bb20aab6bbb9aa3b7d953db6984949f7336668c9429fa86d

    • SHA512

      e9aa62b1fb6ce5a06374a235d357ce1e2b74b0b0f4ffb5109a9653f54338874b23b49c57c328071e3ea44c74bb86032314d818bd37da2dd6bdd3dbd27f99ebfd

    Score
    10/10
    saintbotdropper

    • SaintBot

      Saint Bot is a malware dropper being used to deliver secondary payloads such as information stealers.

      droppersaintbot

    • SaintBot payload

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks