Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
13-05-2024 08:14
General
-
Target
a69a6db6be2046090b294c59880230409167a82fe824b235af90506accd9c1ee.exe
-
Size
2.9MB
-
MD5
3e41579ead92ce8368b2c1985539d510
-
SHA1
a20ae14e51b16b27b285d020aaa014ec94fb4bdb
-
SHA256
a69a6db6be2046090b294c59880230409167a82fe824b235af90506accd9c1ee
-
SHA512
c9ee45be8c2e00e66668831af1bb5479c603e387f02d6a41c4bbeb9c524b85bdc92f29d06f8bfc35746b2cfd8758d68fd64dca4359ec83f25eecf4377bff414b
-
SSDEEP
49152:1cuumjkA07OTRsaSfpwXTLWi5zPqEMorqXsomXVw2sAMKd70fwkuGn37:1cdAQindcEMor6m7Gwq
Score
10/10
Malware Config
Signatures
-
Banload
Banload variants download malicious files, then install and execute the files.
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Modifies registry class 9 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a69a6db6be2046090b294c59880230409167a82fe824b235af90506accd9c1ee.exe"C:\Users\Admin\AppData\Local\Temp\a69a6db6be2046090b294c59880230409167a82fe824b235af90506accd9c1ee.exe"1⤵
- Checks BIOS information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.9MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
3.9MB
-
Filesize
2.0MB