Overview

overview

10

Static

static

8002d87b9e...15.vbs

windows7_x64

8

8002d87b9e...15.vbs

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8002d87b9e8d6211c4748894cdb039eee927bc5777d3c5db52409e8cbab31715

  • Size

    11KB

  • Sample

    220624-2gx4gaabc5

  • MD5

    8681d7bd5c2d5ceff7611cb07ea020c1

  • SHA1

    28827a904d6c9808aa0ba72a1fe2c4a0930ebdf0

  • SHA256

    8002d87b9e8d6211c4748894cdb039eee927bc5777d3c5db52409e8cbab31715

  • SHA512

    b6891de86f450b06e19a76ee6488d61b5af326dc076475c87d64b64c053baca00c4d8a8ad80fe73e67ca032593e49e4c932e4531a619d4bc3262eb9db7d61d4b

Score
10/10
lampionbankertrojan

Malware Config

Targets

    • Target

      8002d87b9e8d6211c4748894cdb039eee927bc5777d3c5db52409e8cbab31715

    • Size

      11KB

    • MD5

      8681d7bd5c2d5ceff7611cb07ea020c1

    • SHA1

      28827a904d6c9808aa0ba72a1fe2c4a0930ebdf0

    • SHA256

      8002d87b9e8d6211c4748894cdb039eee927bc5777d3c5db52409e8cbab31715

    • SHA512

      b6891de86f450b06e19a76ee6488d61b5af326dc076475c87d64b64c053baca00c4d8a8ad80fe73e67ca032593e49e4c932e4531a619d4bc3262eb9db7d61d4b

    Score
    10/10
    lampionbankertrojan

    • Lampion

      Lampion is a banking trojan, targeting Portuguese speaking countries.

      trojanbankerlampion

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks