Overview

overview

10

Static

static

Transferen...11.vbs

windows7_x64

10

Transferen...11.vbs

windows10-2004_x64

10

Transferen...DF.pdf

windows7_x64

1

Transferen...DF.pdf

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5f48c5278651f434a301ae849be3a74c493816cd8f1e52f432b5e18977da52e

  • Size

    58KB

  • Sample

    220524-y3deeafga3

  • MD5

    72e0aa1a6e66175d8da09d19306049ab

  • SHA1

    350aac6f18281bb45e989aedad83b6f6e7e3559b

  • SHA256

    e5f48c5278651f434a301ae849be3a74c493816cd8f1e52f432b5e18977da52e

  • SHA512

    001698fb07744fb80d7fce57e49a1a86bd637bae504a7a08e111ea14e65ac2ddbe04bd07c53bd3cd0812081eef8d41491639687b749a225b12bca33da957a535

Score
10/10
lampionbankertrojan

Malware Config

Targets

    • Target

      Transferencia-Bancaria-Comprovativo-24pb-05052020-PDF-1911/Transferencia-Bancaria-Comprovativo-24pb-05052020-PDF-1911.vbs

    • Size

      22KB

    • MD5

      bce58287fd543a394ebc4c866b52a74d

    • SHA1

      09ed62c7d881f0c7f8a2a54758dfe6c2ed513388

    • SHA256

      aa3d9e85c05f55a26f5e536d0330f35e4fb26d415d10933b4725de1d99eb1463

    • SHA512

      71c0e074439ad4089fed20b6a9d8e0a6989db6937a9bf889fe43b16eb637374eccf83607393e7751dba1a216fbd74feba97d8b3cf247261c40c368279484e159

    Score
    10/10
    lampionbankertrojan

    • Lampion

      Lampion is a banking trojan, targeting Portuguese speaking countries.

      trojanbankerlampion

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    behavioral1behavioral2

    • Target

      Transferencia-Bancaria-Comprovativo-24pb-05052020-PDF-1911/Transferencia-Bancaria-Comprovativo-24pb-05052020-PDF.pdf

    • Size

      8KB

    • MD5

      b74ce8304f64c14709e095ce26c41cd9

    • SHA1

      3fe3e89a2bf6569762422675eb42b96d11e9d8f7

    • SHA256

      5e6234f680e2515da79dcf372da59692f4e8cc9a265bad0d5a1b7f1583340352

    • SHA512

      be4809c0c8f572c926d947f35e6869b5a0692d3cc350b3c89793a4520514f0259249e6d7eccb701d5a0b1cab5ffc62392da611e217f64cabdbfa93ba6dd8081b

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v6

Tasks