General

  • Target

    3c38088ac1eada5c22eefbe02fda29bb

  • Size

    15.8MB

  • Sample

    240101-h2552adgdn

  • MD5

    3c38088ac1eada5c22eefbe02fda29bb

  • SHA1

    7c86eb176988777e4cf788c17c9ea66ca68f7498

  • SHA256

    a453e25a4bf6e9c646a9dffc972d14cdf8934fac6dde2ba02655ca8698bcc18e

  • SHA512

    78fe8db1219fef506c684de6d3ff4384f45287739e0c52bb125581f0576bb7040a461a527aa8f186e11544969ec1ab8334563d92850d230f6a804199f576303a

  • SSDEEP

    196608:7r4tTgb4Fik6QGFSvQRljV2+W504pAItsN8X79cMl6XJ1p2IgWSVuj4:7r4tTyu6QYw6rbN8X79cMIJHoWUa4

Malware Config

Targets

    • Target

      3c38088ac1eada5c22eefbe02fda29bb

    • Size

      15.8MB

    • MD5

      3c38088ac1eada5c22eefbe02fda29bb

    • SHA1

      7c86eb176988777e4cf788c17c9ea66ca68f7498

    • SHA256

      a453e25a4bf6e9c646a9dffc972d14cdf8934fac6dde2ba02655ca8698bcc18e

    • SHA512

      78fe8db1219fef506c684de6d3ff4384f45287739e0c52bb125581f0576bb7040a461a527aa8f186e11544969ec1ab8334563d92850d230f6a804199f576303a

    • SSDEEP

      196608:7r4tTgb4Fik6QGFSvQRljV2+W504pAItsN8X79cMl6XJ1p2IgWSVuj4:7r4tTyu6QYw6rbN8X79cMIJHoWUa4

    • Banload

      Banload variants download malicious files, then install and execute the files.

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks