lampion | ce53debed7256fb71532e0348214356383070d24cc86ac59e94395225761f765 | Triage

Sharing

General

Target

ce53debed7256fb71532e0348214356383070d24cc86ac59e94395225761f765
Size

27KB
Sample

220128-wvzxbsaber
MD5

6d4c57b3600d896553e1a4aa0419dfec
SHA1

ae960f8bcb5401e756a4074ca9fdfe6d4b303b23
SHA256

ce53debed7256fb71532e0348214356383070d24cc86ac59e94395225761f765
SHA512

183f4178aa5ff56a7a27f4e6ef70c1a3e9b1fd098a624511053833f0cd310d6dbfc4235f764be204994409a871dce92fbb8559c18750f505f3fcd7cd650d91fa

Score

10^/10

lampion banker trojan

Malware Config

Targets

- Target
  
  ce53debed7256fb71532e0348214356383070d24cc86ac59e94395225761f765
- Size
  
  27KB
- MD5
  
  6d4c57b3600d896553e1a4aa0419dfec
- SHA1
  
  ae960f8bcb5401e756a4074ca9fdfe6d4b303b23
- SHA256
  
  ce53debed7256fb71532e0348214356383070d24cc86ac59e94395225761f765
- SHA512
  
  183f4178aa5ff56a7a27f4e6ef70c1a3e9b1fd098a624511053833f0cd310d6dbfc4235f764be204994409a871dce92fbb8559c18750f505f3fcd7cd650d91fa
Score

10^/10

lampion banker trojan
- Lampion
  Lampion is a banking trojan, targeting Portuguese speaking countries.
  trojan banker lampion
- Blocklisted process makes network request
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

lampionbankertrojan

behavioral2