General

  • Target
    binance_bot.zip
  • Size 60KB
  • Sample260708-wvb59sfv6x
  • SHA256 24dde8de5fa4f8ea1751a750403975d7a77f8831119c55a1e4f77c7a39792f2a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      binance_bot/index.php
    • Size 31KB
    • SHA256 ea4c26b24ab6aad0c00227d0d021299bde36e8e63cfed91cda0af5c30de87555
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      binance_bot/multi.php
    • Size 19KB
    • SHA256 5e97e9b2e791603deec927e106488d6a388ab1e22868b3dd83ef8335fe64c3a0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      binance_bot/rsi.php
    • Size 21KB
    • SHA256 beb331bb18ab9fdd50de1aae05234c8de744cae79b0bce634bdf67ce16749f6f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      binance_bot/rsi_change.php
    • Size 21KB
    • SHA256 07645776f594b4a568083d218cdc5873f57ea22b2294012426a198a0d5b6a04b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      binance_bot/trailing.php
    • Size 20KB
    • SHA256 16a8cbf82302f13cc1096198961ee678b08f5efe1dae8954761254335fd4b365
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks