Overview

overview

10

Static

static

1

2024-02-13...ia.exe

windows7-x64

10

2024-02-13...ia.exe

windows10-2004-x64

10

Resubmissions

14-02-2024 18:02

240214-wmwvpsac85 10

13-02-2024 06:06

240213-gt8eraag5t 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-13_75d85196bcd2dcd5b9c720639fa5ec0b_mafia

  • Size

    2.1MB

  • Sample

    240213-gt8eraag5t

  • MD5

    75d85196bcd2dcd5b9c720639fa5ec0b

  • SHA1

    e5ff15ffd97b2be244dc677649ff8d0e4bd510ca

  • SHA256

    5ce05e579a9b572526c157814ea7d975888b445ba08e3dc2687bc8b35f7f84bb

  • SHA512

    4caf9d4950fe0cce53880615aa6c4195e56db89bad1b2457a0ad7f08ecd08f84f8e4a4f97e18f2fb9cd281f2462080656cfff91d380385fc481bf4f3106997ee

  • SSDEEP

    49152:bWxM9NpGFN4sTMrHMKxnsJA9c7KCqL9Xb6YL0AzteMz:bWWfpqEQKG+NYYL020Mz

Score
10/10
banloaddownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      2024-02-13_75d85196bcd2dcd5b9c720639fa5ec0b_mafia

    • Size

      2.1MB

    • MD5

      75d85196bcd2dcd5b9c720639fa5ec0b

    • SHA1

      e5ff15ffd97b2be244dc677649ff8d0e4bd510ca

    • SHA256

      5ce05e579a9b572526c157814ea7d975888b445ba08e3dc2687bc8b35f7f84bb

    • SHA512

      4caf9d4950fe0cce53880615aa6c4195e56db89bad1b2457a0ad7f08ecd08f84f8e4a4f97e18f2fb9cd281f2462080656cfff91d380385fc481bf4f3106997ee

    • SSDEEP

      49152:bWxM9NpGFN4sTMrHMKxnsJA9c7KCqL9Xb6YL0AzteMz:bWWfpqEQKG+NYYL020Mz

    Score
    10/10
    banloaddownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks