Overview

overview

10

Static

static

3

5cb37592f7...32.exe

windows7-x64

10

5cb37592f7...32.exe

windows7-x64

10

5cb37592f7...32.exe

windows10-1703-x64

10

5cb37592f7...32.exe

windows10-2004-x64

10

5cb37592f7...32.exe

windows11-21h2-x64

3

Resubmissions

17-04-2024 11:52

240417-n169ladg88 10

17-04-2024 11:52

240417-n11rtafd51 10

17-04-2024 11:52

240417-n11f2sdg83 10

17-04-2024 11:52

240417-n1zvhsfd5z 10

17-04-2024 11:52

240417-n1y8zsdg82 10

16-04-2024 13:36

240416-qwpvvsbc96 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5cb37592f7d36143707c41a09c92f511323eae1fadfa1dc116d4099e27f11132

  • Size

    1.3MB

  • Sample

    240417-n1zvhsfd5z

  • MD5

    02f1eaa4a9a976453c2edcdf35eb5267

  • SHA1

    8dcc6ef3efb3a468457f0eacac4916b4de1a269a

  • SHA256

    5cb37592f7d36143707c41a09c92f511323eae1fadfa1dc116d4099e27f11132

  • SHA512

    de2454c505d6d45163ab985e16ec57146753d2f521eac9cf6f944604740c408e2ef749a6a0eb04e8cdd5f3fc39ce5327916fa07a6e91f46e4c296bb81e064362

  • SSDEEP

    12288:hD0Yxtmgcj3DKjs16MKYIjhy+AC5j6vfNqM:hQYxtmiEEYIjhyQj6vfNqM

Score
10/10
osirisbankerbotnet

Malware Config

Targets

    • Target

      5cb37592f7d36143707c41a09c92f511323eae1fadfa1dc116d4099e27f11132

    • Size

      1.3MB

    • MD5

      02f1eaa4a9a976453c2edcdf35eb5267

    • SHA1

      8dcc6ef3efb3a468457f0eacac4916b4de1a269a

    • SHA256

      5cb37592f7d36143707c41a09c92f511323eae1fadfa1dc116d4099e27f11132

    • SHA512

      de2454c505d6d45163ab985e16ec57146753d2f521eac9cf6f944604740c408e2ef749a6a0eb04e8cdd5f3fc39ce5327916fa07a6e91f46e4c296bb81e064362

    • SSDEEP

      12288:hD0Yxtmgcj3DKjs16MKYIjhy+AC5j6vfNqM:hQYxtmiEEYIjhyQj6vfNqM

    Score
    10/10
    osirisbankerbotnet

    • Osiris

      bankerbotnetosiris

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

    behavioral1behavioral2behavioral3behavioral4behavioral5

MITRE ATT&CK Enterprise v15

Tasks