Overview

overview

10

Static

static

3

188f978090...fd.exe

windows7-x64

10

188f978090...fd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    188f978090bb2f61c3b9ea9e7e2a726c5b4621b6d67f71664a769e036e31d9fd

  • Size

    6.1MB

  • Sample

    240711-kr93cayfqr

  • MD5

    e39a81ad695da1c3daab970ed47d6fa8

  • SHA1

    617986ea499abbea8eea98a1a79643e0a7dce5f6

  • SHA256

    188f978090bb2f61c3b9ea9e7e2a726c5b4621b6d67f71664a769e036e31d9fd

  • SHA512

    4a0cac2f9830cf66b1c88cffb760b7463a39fd3ce3abdc53d46d40db6966be5e87611f2fd7f998af98097318df0bab01e3e49b00b8fd61a2c2e2bac2bb046ab8

  • SSDEEP

    196608:L8GLRqwzPnswa6K76PmRxDlFLOyomFHKnP:L8GLM8nsiK76ApF

Score
10/10
banloaddownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      188f978090bb2f61c3b9ea9e7e2a726c5b4621b6d67f71664a769e036e31d9fd

    • Size

      6.1MB

    • MD5

      e39a81ad695da1c3daab970ed47d6fa8

    • SHA1

      617986ea499abbea8eea98a1a79643e0a7dce5f6

    • SHA256

      188f978090bb2f61c3b9ea9e7e2a726c5b4621b6d67f71664a769e036e31d9fd

    • SHA512

      4a0cac2f9830cf66b1c88cffb760b7463a39fd3ce3abdc53d46d40db6966be5e87611f2fd7f998af98097318df0bab01e3e49b00b8fd61a2c2e2bac2bb046ab8

    • SSDEEP

      196608:L8GLRqwzPnswa6K76PmRxDlFLOyomFHKnP:L8GLM8nsiK76ApF

    Score
    10/10
    banloaddownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks