Overview

overview

10

Static

static

3

2024-03-22...ia.exe

windows7-x64

10

2024-03-22...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-22_91f0a3e77e57a05bf18edcaf747f096e_mafia

  • Size

    6.6MB

  • Sample

    240322-3mpvqaae36

  • MD5

    91f0a3e77e57a05bf18edcaf747f096e

  • SHA1

    f0ca1fae63c790d622633854eff6a4cac4fdbf6d

  • SHA256

    f6531722562c5c9a76b1da477587106c0ef92f26643280b7c993150d6065cf92

  • SHA512

    82d3b038c6d2182b814730ed9d096370087d3c0082940116a81a94009d2147b1217fbf97c118dd44da901c25138a29824586c7c9f056ed6f27bca3f51f9828b1

  • SSDEEP

    196608:eRXpv54euJpb9mOtQqkaFj2Qbww54dkrX:eRXpv54eg95rCgwwWdkr

Score
10/10
banloaddownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      2024-03-22_91f0a3e77e57a05bf18edcaf747f096e_mafia

    • Size

      6.6MB

    • MD5

      91f0a3e77e57a05bf18edcaf747f096e

    • SHA1

      f0ca1fae63c790d622633854eff6a4cac4fdbf6d

    • SHA256

      f6531722562c5c9a76b1da477587106c0ef92f26643280b7c993150d6065cf92

    • SHA512

      82d3b038c6d2182b814730ed9d096370087d3c0082940116a81a94009d2147b1217fbf97c118dd44da901c25138a29824586c7c9f056ed6f27bca3f51f9828b1

    • SSDEEP

      196608:eRXpv54euJpb9mOtQqkaFj2Qbww54dkrX:eRXpv54eg95rCgwwWdkr

    Score
    10/10
    banloaddownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks