loaderbot | 91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3 | Triage

Sharing

General

Target

91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3
Size

4.0MB
MD5

dd4022cf436e30b6f6c6df7d27a6fa8e
SHA1

5ca8d97c078b65202cada04bcad4111f6cfa9be6
SHA256

91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3
SHA512

272133fa1e7278a03a97b37f8b93df2ee11c721448e1c6025c5409ef35a945c32d91e7dd3aed33fce5c229da38ede3d5b2adf6ef772296257db4be088bdcca1f
SSDEEP

49152:VNDFFPJu8fBsVE6ij+RNg+UKpBvtqB3m1RC3:TzP88fBsnZTgOtqB3m1RC3

Score

10^/10

loaderbot

Malware Config

Extracted

Family

loaderbot

C2

http://cr71642.tmweb.ru/cmd.php

Signatures

LoaderBot executable 1 IoCs

resource	yara_rule
sample	loaderbot

Loaderbot family
loaderbot

Files

91723a9ace6dfdf0edbb50cc4f45336e7830d92d3199df875301be79a83ba0c3
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ