Overview

overview

10

Static

static

3

cffa8abc1b...d3.exe

windows7-x64

10

cffa8abc1b...d3.exe

windows10-1703-x64

10

cffa8abc1b...d3.exe

windows10-2004-x64

7

cffa8abc1b...d3.exe

windows11-21h2-x64

10

Resubmissions

17-03-2024 04:56

240317-fkpqlseg53 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cffa8abc1bd0d8409d62b1adb675a6d3

  • Size

    434KB

  • Sample

    240414-r75k5ahd82

  • MD5

    cffa8abc1bd0d8409d62b1adb675a6d3

  • SHA1

    37e8bc4d8ffc6ff4256a82bc057960e2cbb022e1

  • SHA256

    ac8ec076126d9905b8a3e677c94607c356bd5418092ac00b25de85cad02f6380

  • SHA512

    7112efdbc879550dd33ddf47f50d44e2ea4ab1e98d2d5d1c48a7f16dc949154228c933095e99050fea61970897c671195f9674bcdece090dc8a0a520e8bc9841

  • SSDEEP

    12288:rXPcLcbGfVylwG/ZDCK/ScBXo8TsyMkKMY8m7WOK9SATTsx/SA/WegYfdNbrqnuk:rXh6XcBXo8TsL8Y8m/ATTySA/DrfdNbC

Score
10/10
osirisbankerbotnet

Malware Config

Targets

    • Target

      cffa8abc1bd0d8409d62b1adb675a6d3

    • Size

      434KB

    • MD5

      cffa8abc1bd0d8409d62b1adb675a6d3

    • SHA1

      37e8bc4d8ffc6ff4256a82bc057960e2cbb022e1

    • SHA256

      ac8ec076126d9905b8a3e677c94607c356bd5418092ac00b25de85cad02f6380

    • SHA512

      7112efdbc879550dd33ddf47f50d44e2ea4ab1e98d2d5d1c48a7f16dc949154228c933095e99050fea61970897c671195f9674bcdece090dc8a0a520e8bc9841

    • SSDEEP

      12288:rXPcLcbGfVylwG/ZDCK/ScBXo8TsyMkKMY8m7WOK9SATTsx/SA/WegYfdNbrqnuk:rXh6XcBXo8TsL8Y8m/ATTySA/DrfdNbC

    Score
    10/10
    osirisbankerbotnet

    • Osiris

      bankerbotnetosiris

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks