General

  • Target

    56e2baf5c4a18cc9ecf8a5b4d41598488c285016d733fe2e8b1e0fc18cc31c47

  • Size

    16KB

  • Sample

    220725-bshvtahbgp

  • MD5

    28f2a2d70f07a4c4693ca44579dd4b81

  • SHA1

    f7246bf4ee3fdab958edaa6b717b185d0def17d1

  • SHA256

    56e2baf5c4a18cc9ecf8a5b4d41598488c285016d733fe2e8b1e0fc18cc31c47

  • SHA512

    1afa1c8d97b13b6363a0c2607b7133ceada6e9065ae802d53ea5d44739a504828e6dcab85ffcddbf8145c7720289f1a52c57c20408965c26dbec5df10c24c8c0

Malware Config

Targets

    • Target

      56e2baf5c4a18cc9ecf8a5b4d41598488c285016d733fe2e8b1e0fc18cc31c47

    • Size

      16KB

    • MD5

      28f2a2d70f07a4c4693ca44579dd4b81

    • SHA1

      f7246bf4ee3fdab958edaa6b717b185d0def17d1

    • SHA256

      56e2baf5c4a18cc9ecf8a5b4d41598488c285016d733fe2e8b1e0fc18cc31c47

    • SHA512

      1afa1c8d97b13b6363a0c2607b7133ceada6e9065ae802d53ea5d44739a504828e6dcab85ffcddbf8145c7720289f1a52c57c20408965c26dbec5df10c24c8c0

    • LoaderBot

      LoaderBot is a loader written in .NET downloading and executing miners.

    • LoaderBot executable

    • Drops startup file

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks