General

  • Target
    FL.BOT V2.3 (1).zip
  • Size 18KB
  • Sample260718-t47mesaz9s
  • SHA256 e0c017e9479045d2f72cdf4b17addfd82250f82b9dccb5ed97e0d241a1ae9e7f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      RunApp.bat
    • Size 284B
    • SHA256 48ac7cfa451e9e7e23a987b495a45e026322047fcc7db9c273ff38e4c030f37f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      afk.py
    • Size 2KB
    • SHA256 092e55ae585251d7947dc3d775cbc8454b0509696b18d6f9dd81b38595328547
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      automessage.py
    • Size 3KB
    • SHA256 33d3bedf34de9f2c976e9eb5cee6516581c25504907ea6abab32b7294867f385
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      bot.py
    • Size 53KB
    • SHA256 854311437f0f61157a8ead17999a06ce7824367d69f5fa9921aff1963bad322f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      status_rotator.py
    • Size 2KB
    • SHA256 b021e8c5f37415c8cc17c6b35c49477e23196d1d37bfc02b42bf2c0f9c9cf4f8
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      tokennn.py
    • Size 10B
    • SHA256 14550ea83cfdd35decb77349f5535806a66f7e73345c73f66f6f31a86bae14e6
    • MD5 SHA1 SHA512
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks