Overview

overview

10

Static

static

9a2f575d77...6d.vbs

windows7_x64

10

9a2f575d77...6d.vbs

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a2f575d77cc03afe1230666ed23c1da58dd1644abf02e2487c6cd0db8b2a26d

  • Size

    16KB

  • Sample

    220128-x59d7abhe2

  • MD5

    2a22f9e6eee207c35229063f75121696

  • SHA1

    bdc5d7edcebaaa8508a005943c77cf3fc436542c

  • SHA256

    9a2f575d77cc03afe1230666ed23c1da58dd1644abf02e2487c6cd0db8b2a26d

  • SHA512

    edad6360a533ffbc4dc91d323109808f45f01070a245555a1a91c62ef142e180c09f61cc92a11a9583cdd6c5a5fd66642d832b14eab20fac77aa0b237a6cce68

Score
10/10
lampionbankertrojan

Malware Config

Targets

    • Target

      9a2f575d77cc03afe1230666ed23c1da58dd1644abf02e2487c6cd0db8b2a26d

    • Size

      16KB

    • MD5

      2a22f9e6eee207c35229063f75121696

    • SHA1

      bdc5d7edcebaaa8508a005943c77cf3fc436542c

    • SHA256

      9a2f575d77cc03afe1230666ed23c1da58dd1644abf02e2487c6cd0db8b2a26d

    • SHA512

      edad6360a533ffbc4dc91d323109808f45f01070a245555a1a91c62ef142e180c09f61cc92a11a9583cdd6c5a5fd66642d832b14eab20fac77aa0b237a6cce68

    Score
    10/10
    lampionbankertrojan

    • Lampion

      Lampion is a banking trojan, targeting Portuguese speaking countries.

      trojanbankerlampion

    • Blocklisted process makes network request

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks