Overview

overview

10

Static

static

681e3f6ec1...d4.vbs

windows7_x64

8

681e3f6ec1...d4.vbs

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    681e3f6ec11f5fc726b234a71f797c969d6b88175b55273513f0da7cd53ef8d4

  • Size

    15KB

  • Sample

    220625-k52m5aecdp

  • MD5

    65283458b84abbb4859e69367cf2b6db

  • SHA1

    b16ab4ab88855b9a07957ddec4ca0afd489cc869

  • SHA256

    681e3f6ec11f5fc726b234a71f797c969d6b88175b55273513f0da7cd53ef8d4

  • SHA512

    7c570c8e2e0e0544a158b262728513e9d4842f043a52c155f934785aaf71e6f4a3e9a3961691790cfb48e013069e8a3a07c4a342a553937ffdb609be56289e98

Score
10/10
lampionbankertrojan

Malware Config

Targets

    • Target

      681e3f6ec11f5fc726b234a71f797c969d6b88175b55273513f0da7cd53ef8d4

    • Size

      15KB

    • MD5

      65283458b84abbb4859e69367cf2b6db

    • SHA1

      b16ab4ab88855b9a07957ddec4ca0afd489cc869

    • SHA256

      681e3f6ec11f5fc726b234a71f797c969d6b88175b55273513f0da7cd53ef8d4

    • SHA512

      7c570c8e2e0e0544a158b262728513e9d4842f043a52c155f934785aaf71e6f4a3e9a3961691790cfb48e013069e8a3a07c4a342a553937ffdb609be56289e98

    Score
    10/10
    lampionbankertrojan

    • Lampion

      Lampion is a banking trojan, targeting Portuguese speaking countries.

      trojanbankerlampion

    • Blocklisted process makes network request

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks