General
- Target grand.EXE
- Size 5.5MB
- Sample231130-v358msfb4v
- SHA256 c5195273e6bed87762880598a2a08bdeadab8d84fab3e78b6726c7eadd08ed54
- MD5 47f7101191190d132a438444ee64a798
- SHA1 1b17f49c98c7a0dcf7d40752dacf6b9e99ebe2d3
- SHA512 6fdd4755a6c6fa157fef65e88dd5d702df7a053fa36f5646a258edb9900c2f34fd4af440ff6d06d8a8ac11fd55273244f346b064a120d172846f09ac3dbd77c3
- SSDEEP 98304:vyghDiIufzZIKj5Ahc3x8x/3a1UVG+5T8wNyxZnkkYOW:vJhZuf+W1xGSUVG+x8wQZXY
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
grand.exe
Resource
win10v2004-20231127-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target grand.EXE
- Size 5.5MB
- SHA256 c5195273e6bed87762880598a2a08bdeadab8d84fab3e78b6726c7eadd08ed54
- MD5 47f7101191190d132a438444ee64a798
- SHA1 1b17f49c98c7a0dcf7d40752dacf6b9e99ebe2d3
- SHA512 6fdd4755a6c6fa157fef65e88dd5d702df7a053fa36f5646a258edb9900c2f34fd4af440ff6d06d8a8ac11fd55273244f346b064a120d172846f09ac3dbd77c3
- SSDEEP 98304:vyghDiIufzZIKj5Ahc3x8x/3a1UVG+5T8wNyxZnkkYOW:vJhZuf+W1xGSUVG+x8wQZXY
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detects Grandoreiro payload
-
Grandoreiro
Part of a group of banking trojans, targeting Spanish and Portuguese speaking countries.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application