Behavioral task
behavioral1
Sample
d346c94f-c1b5-757b.msi
Resource
win7-20240220-es
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
d346c94f-c1b5-757b.msi
Resource
win10v2004-20240508-es
9 signatures
150 seconds
General
-
Target
d346c94f-c1b5-757b.msi
-
Size
7.8MB
-
MD5
ffa79d6b5eb84e8a714f185eb55278e4
-
SHA1
d9841949fc96bb4f72c1cf377333d12fae0f8c5a
-
SHA256
abc72097f51360b0d2ec6cee38f61f2416177e6b4bf55f48ff3221ce58e5ce2b
-
SHA512
667b0a6025b629f02a096c245842117782de12c10216be2acbaf3205f8fb19578985b1306b0d10555e532d708f93268861175de7a72abb02fc7beb6e15e99a49
-
SSDEEP
196608:F9YuWsRVjVJFAoGgSWhGGO9AaLF+AXvkmxxrRq:F99WsRVj7esoqax+g9Fq
Score
10/10
Malware Config
Signatures
-
Detects common strings, DLL and API in Banker_BR 1 IoCs
Hunting by known PDB files - Trojan Banker LATAM.
resource yara_rule sample Detect_MSI_LATAM_Banker_From_LatAm
Files
-
d346c94f-c1b5-757b.msi.msi