Overview

overview

10

Static

static

1

8681d7bd5c...18.vbs

windows7-x64

8681d7bd5c...18.vbs

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8681d7bd5c2d5ceff7611cb07ea020c1_JaffaCakes118

  • Size

    11KB

  • Sample

    240531-la9kxsea54

  • MD5

    8681d7bd5c2d5ceff7611cb07ea020c1

  • SHA1

    28827a904d6c9808aa0ba72a1fe2c4a0930ebdf0

  • SHA256

    8002d87b9e8d6211c4748894cdb039eee927bc5777d3c5db52409e8cbab31715

  • SHA512

    b6891de86f450b06e19a76ee6488d61b5af326dc076475c87d64b64c053baca00c4d8a8ad80fe73e67ca032593e49e4c932e4531a619d4bc3262eb9db7d61d4b

  • SSDEEP

    192:E9FeVYIAvL5ojSBcaRZpA4zeOI4KhMort6lI4Ob6F7Nz1lSA9HYBzv++365q:EeVaqjSBd64KXtD4ObUTSA9y3kq

Score
10/10
lampionbankertrojan

Malware Config

Targets

    • Target

      8681d7bd5c2d5ceff7611cb07ea020c1_JaffaCakes118

    • Size

      11KB

    • MD5

      8681d7bd5c2d5ceff7611cb07ea020c1

    • SHA1

      28827a904d6c9808aa0ba72a1fe2c4a0930ebdf0

    • SHA256

      8002d87b9e8d6211c4748894cdb039eee927bc5777d3c5db52409e8cbab31715

    • SHA512

      b6891de86f450b06e19a76ee6488d61b5af326dc076475c87d64b64c053baca00c4d8a8ad80fe73e67ca032593e49e4c932e4531a619d4bc3262eb9db7d61d4b

    • SSDEEP

      192:E9FeVYIAvL5ojSBcaRZpA4zeOI4KhMort6lI4Ob6F7Nz1lSA9HYBzv++365q:EeVaqjSBd64KXtD4ObUTSA9y3kq

    Score
    10/10
    lampionbankertrojan

    • Lampion

      Lampion is a banking trojan, targeting Portuguese speaking countries.

      trojanbankerlampion

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks