Analysis
-
max time kernel
74s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 19:06
General
-
Target
СЧЕТ-ФАКТУРА № 000835 от 26.08.2014.scr
-
Size
2.9MB
-
MD5
68cbf4a764bd3da616b6426f8ee2fd42
-
SHA1
69deb224d550f4589e10170005ad862748964b9a
-
SHA256
be1363a19716c5e32da206ba6dcca80681152a91d67379128352655d0317b775
-
SHA512
0b511fb4cd3bf5df846f48faf062f1245dc79697429a64d7c4854554ef088bfc36fa6ce3328eadd468e52a3f90d4775796ede7506e361a9051b149a3170d9d71
-
SSDEEP
49152:zMtQqMq0Yya4SOHZ3+TFTdclL/4J8200q5VWy7EeNmpQ1qocB+t/5m/hN/cM/q7P:otQLLY73OH0dclL/4JoPtQAmpQ1qoc2V
Score
10/10
Malware Config
Signatures
-
Banload
Banload variants download malicious files, then install and execute the files.
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Modifies registry class 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
-
Suspicious use of WriteProcessMemory 30 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\СЧЕТ-ФАКТУРА № 000835 от 26.08.2014.scr"C:\Users\Admin\AppData\Local\Temp\СЧЕТ-ФАКТУРА № 000835 от 26.08.2014.scr" /S1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\СЧЕТ-ФАКТУРА № 000835 от 26.08.2014.scr"C:\Users\Admin\AppData\Local\Temp\СЧЕТ-ФАКТУРА № 000835 от 26.08.2014.scr" /S2⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\СЧЕТ-ФАКТУРА № 000835 от 26.08.2014.scr"C:\Users\Admin\AppData\Local\Temp\СЧЕТ-ФАКТУРА № 000835 от 26.08.2014.scr"3⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
5.2MB
-
Filesize
4KB
-
Filesize
4KB
-
-
Filesize
5.2MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
-
Filesize
1.0MB