loaderbot | d83eb977fd0bf85f46a32cae0bf864202325ee1b2897aeb6f879da84a18db365

Analysis

max time kernel
261s
max time network
282s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
07-12-2022 06:12

Target

1140-55-0x000000001BD20000-0x000000001C11E000-memory.exe
Size

4.0MB
MD5

18cd1c070e1512dad36082a6db5a1f5d
SHA1

a3658f25e283e3df1be4a3deab4eae8435aeeef7
SHA256

d83eb977fd0bf85f46a32cae0bf864202325ee1b2897aeb6f879da84a18db365
SHA512

4a8aac1e5f58cd15c260fe5bf884cda5b59ac892daa1e948e24311353c8759985c0ae3036a8c4883c70273ad9764f6df7fea1086bede2d59a2e4f03701baa23a
SSDEEP

49152:VNDFFPJu8fBsVE6ij+RNg+UKpBvtqB3m1RC3:TzP88fBsnZTgOtqB3m1RC3

Score

10^/10

LoaderBot
LoaderBot is a loader written in .NET downloading and executing miners.
loader miner loaderbot

LoaderBot executable 1 IoCs

resource	yara_rule
behavioral2/memory/744-132-0x0000000000310000-0x000000000070E000-memory.dmp	loaderbot

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4560	744	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\1140-55-0x000000001BD20000-0x000000001C11E000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1140-55-0x000000001BD20000-0x000000001C11E000-memory.exe"
1⤵
PID:744
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 744 -s 756
  2⤵
  - Program crash
  PID:4560

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 428 -p 744 -ip 744
1⤵
PID:4412

memory/744-132-0x0000000000310000-0x000000000070E000-memory.dmp

Filesize
4.0MB

Download
memory/744-133-0x00007FF888020000-0x00007FF888AE1000-memory.dmp

Filesize
10.8MB

Download
memory/744-134-0x00007FF888020000-0x00007FF888AE1000-memory.dmp

Filesize
10.8MB

Download
memory/744-135-0x00007FF888020000-0x00007FF888AE1000-memory.dmp

Filesize
10.8MB

Download