Extracted

• • Target

    Curriculo.lnk

  • Size

    1KB

  • MD5

    58fe09ef368f345697e2815274739431

  • SHA1

    8b16a02c2afb084e89b12e1a224382165a294bc7

  • SHA256

    215404787c1d072eca5cd4423fae4e01d08527657971abf480b753e78ddecbde

  • SHA512

    edfbb3716b1e7e2bbab6415de74f06e0a28c1f68d3d7dfbf7ee154161295c00c8314359168c5f6eb851a93d1e1c1311fb77217bd83f97b224206fd01e048019d

  Score

  10^/10

  latam_generic_downloaderbankerloader

  • Generic LATAM Downloader

    Generic Latin American MSI downloader used to drop various banking trojans.

    loaderbankerlatam_generic_downloader

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Use of msiexec (install) with remote resource

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2