Overview

overview

10

Static

static

3

a55da20fb4...f3.exe

windows7-x64

10

a55da20fb4...f3.exe

windows7-x64

10

a55da20fb4...f3.exe

windows10-1703-x64

10

a55da20fb4...f3.exe

windows10-2004-x64

10

a55da20fb4...f3.exe

windows11-21h2-x64

3

Resubmissions

17-04-2024 08:47

240417-kp44baac28 10

17-04-2024 08:47

240417-kp4sjsbg4z 10

17-04-2024 08:47

240417-kp361sbg4y 10

17-04-2024 08:47

240417-kp3v9aac26 10

17-04-2024 08:47

240417-kp3kgsbg4x 10

17-04-2024 06:23

240417-g5jkrsfg49 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a55da20fb4e6a4a88b2eef5b7c68146c2f33ffca24571a95ee7d29b638aa48f3

  • Size

    1.3MB

  • Sample

    240417-kp361sbg4y

  • MD5

    b56f2fa2ff6e06da3932ffa70b8440c5

  • SHA1

    9136b20d2fd9d4ea09981df6552f2691f13ab997

  • SHA256

    a55da20fb4e6a4a88b2eef5b7c68146c2f33ffca24571a95ee7d29b638aa48f3

  • SHA512

    dad969a36e05dfff7c62ec4b74986a2b71f0d7e2d64208e9c0bbbd9cf945c238d82f13bbeb56cf1336fc9078ed10ef0ab6d376546f8e9880f5d94f9004d90ccb

  • SSDEEP

    12288:hD0Yxtmgcj3DKjs16MKYIjhy+AC5j6vfNqn:hQYxtmiEEYIjhyQj6vfNqn

Score
10/10
osirisbankerbotnet

Malware Config

Targets

    • Target

      a55da20fb4e6a4a88b2eef5b7c68146c2f33ffca24571a95ee7d29b638aa48f3

    • Size

      1.3MB

    • MD5

      b56f2fa2ff6e06da3932ffa70b8440c5

    • SHA1

      9136b20d2fd9d4ea09981df6552f2691f13ab997

    • SHA256

      a55da20fb4e6a4a88b2eef5b7c68146c2f33ffca24571a95ee7d29b638aa48f3

    • SHA512

      dad969a36e05dfff7c62ec4b74986a2b71f0d7e2d64208e9c0bbbd9cf945c238d82f13bbeb56cf1336fc9078ed10ef0ab6d376546f8e9880f5d94f9004d90ccb

    • SSDEEP

      12288:hD0Yxtmgcj3DKjs16MKYIjhy+AC5j6vfNqn:hQYxtmiEEYIjhyQj6vfNqn

    Score
    10/10
    osirisbankerbotnet

    • Osiris

      bankerbotnetosiris

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

    behavioral1behavioral2behavioral3behavioral4behavioral5

MITRE ATT&CK Enterprise v15

Tasks