Overview

overview

10

Static

static

3

eaec2c1417...37.exe

windows7-x64

10

eaec2c1417...37.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eaec2c141798fc8da7431235ab33d4e03011d9a897a194fc06092486ba134737

  • Size

    6.2MB

  • Sample

    240818-3zmacsscnc

  • MD5

    e89dee5428f09fbab5a3e42a636746a4

  • SHA1

    24d01e7eefddcf0d48ba16d608e5d506b3ecff5c

  • SHA256

    eaec2c141798fc8da7431235ab33d4e03011d9a897a194fc06092486ba134737

  • SHA512

    1ff9e4e8b40ba666da314d848e0fc5219b789ead6265565527dcb0e3c901ec4fba6522e7ff4693f4de152e52ed4f2eb26ff066ed99c7c20b86649f1c978f8fc0

  • SSDEEP

    98304:SXh+proAHrdLtnFR/C65xP8+are7LhK+b4RWUSrWT6HKFUKh2FDMGVOU:SXhEoAHrX/CmxRaOK+b4EXrbuVAF/h

Score
10/10
banloaddiscoverydownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      eaec2c141798fc8da7431235ab33d4e03011d9a897a194fc06092486ba134737

    • Size

      6.2MB

    • MD5

      e89dee5428f09fbab5a3e42a636746a4

    • SHA1

      24d01e7eefddcf0d48ba16d608e5d506b3ecff5c

    • SHA256

      eaec2c141798fc8da7431235ab33d4e03011d9a897a194fc06092486ba134737

    • SHA512

      1ff9e4e8b40ba666da314d848e0fc5219b789ead6265565527dcb0e3c901ec4fba6522e7ff4693f4de152e52ed4f2eb26ff066ed99c7c20b86649f1c978f8fc0

    • SSDEEP

      98304:SXh+proAHrdLtnFR/C65xP8+are7LhK+b4RWUSrWT6HKFUKh2FDMGVOU:SXhEoAHrX/CmxRaOK+b4EXrbuVAF/h

    Score
    10/10
    banloaddiscoverydownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks