Overview

overview

10

Static

static

3

2024-04-16...ia.exe

windows7-x64

10

2024-04-16...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-16_b677d26884f0477b7968efc7fdd571ef_mafia

  • Size

    2.0MB

  • Sample

    240416-r8kmcaed4s

  • MD5

    b677d26884f0477b7968efc7fdd571ef

  • SHA1

    cbd607000d799adef300ea6f7ceca0167dc33b15

  • SHA256

    0d61072b68bd99ded6712167e8a225c7f5f7a35634f527dd24b23d3ea54fc33f

  • SHA512

    dc5e9326b9772c7f6b6484ef89dae1cc4a3aea05b327e98e8aa69af012a69cfe0890d728bcca173c40754663b7481add946ba9f150c344dbe9ee7195ee8da058

  • SSDEEP

    49152:4eXOAxMOkCWTonzCUsD85m7qnjJA0vdYvM:4e+AqOjWU1jJAM

Score
10/10
banloaddownloaderdroppertrojan

Malware Config

Targets

    • Target

      2024-04-16_b677d26884f0477b7968efc7fdd571ef_mafia

    • Size

      2.0MB

    • MD5

      b677d26884f0477b7968efc7fdd571ef

    • SHA1

      cbd607000d799adef300ea6f7ceca0167dc33b15

    • SHA256

      0d61072b68bd99ded6712167e8a225c7f5f7a35634f527dd24b23d3ea54fc33f

    • SHA512

      dc5e9326b9772c7f6b6484ef89dae1cc4a3aea05b327e98e8aa69af012a69cfe0890d728bcca173c40754663b7481add946ba9f150c344dbe9ee7195ee8da058

    • SSDEEP

      49152:4eXOAxMOkCWTonzCUsD85m7qnjJA0vdYvM:4e+AqOjWU1jJAM

    Score
    10/10
    banloaddownloaderdroppertrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks