banload | e1579f0edb7f727fce20a30bba70dde9ee234b60df068d81d967d8725ef8a2c9 | Triage

Submit
Reports

Overview

overview

Static

static

1

e1579f0edb...c9.exe

windows7-x64

e1579f0edb...c9.exe

windows10-2004-x64

Sharing

General

Target

e1579f0edb7f727fce20a30bba70dde9ee234b60df068d81d967d8725ef8a2c9
Size

5.8MB
Sample

240515-za1jxaah53
MD5

47d9e386e9d02847d408af2cbbfd6cef
SHA1

77eb1b1ede0bbc5bdbd6a8cac794494387a4b3da
SHA256

e1579f0edb7f727fce20a30bba70dde9ee234b60df068d81d967d8725ef8a2c9
SHA512

0a17f1e6dfa1b5213f9d7453b9325a6809b85309d31725106db24f25a65ad67cac72c451ccddea3e76274f039a9d1dd1a61af40c5061b2d121cce6b2fdc77da7
SSDEEP

98304:C6hZNmjrcbhF/aOIpTX/0Gj2Z9kUj1R1VeypA5KnTJXjEgAGe1k5O2PSp:C6hZNmjIhFZATy9Nj1R1V5eGTJXTA/

Score

10^/10

banload downloader dropper evasion trojan

Static task

static1

Behavioral task

behavioral1

Sample

e1579f0edb7f727fce20a30bba70dde9ee234b60df068d81d967d8725ef8a2c9.exe

Resource

win7-20240221-en

banload downloader dropper evasion trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

e1579f0edb7f727fce20a30bba70dde9ee234b60df068d81d967d8725ef8a2c9.exe

Resource

win10v2004-20240226-en

banload downloader dropper evasion trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  e1579f0edb7f727fce20a30bba70dde9ee234b60df068d81d967d8725ef8a2c9
- Size
  
  5.8MB
- MD5
  
  47d9e386e9d02847d408af2cbbfd6cef
- SHA1
  
  77eb1b1ede0bbc5bdbd6a8cac794494387a4b3da
- SHA256
  
  e1579f0edb7f727fce20a30bba70dde9ee234b60df068d81d967d8725ef8a2c9
- SHA512
  
  0a17f1e6dfa1b5213f9d7453b9325a6809b85309d31725106db24f25a65ad67cac72c451ccddea3e76274f039a9d1dd1a61af40c5061b2d121cce6b2fdc77da7
- SSDEEP
  
  98304:C6hZNmjrcbhF/aOIpTX/0Gj2Z9kUj1R1VeypA5KnTJXjEgAGe1k5O2PSp:C6hZNmjIhFZATy9Nj1R1V5eGTJXTA/
Score

10^/10

banload downloader dropper evasion trojan
- Banload
  Banload variants download malicious files, then install and execute the files.
  trojan dropper downloader banload
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

banloaddownloaderdropperevasiontrojan

behavioral2

banloaddownloaderdropperevasiontrojan

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.