Overview

overview

10

Static

static

3

2cc7100ac0...76.exe

windows7-x64

10

2cc7100ac0...76.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cc7100ac0684b2c94e5268583e534b62d78859c35679a381616f2bca3f39676

  • Size

    6.7MB

  • Sample

    240823-2fdy7ssgnk

  • MD5

    d5568bd7cb5aef02d1f19dbc9c42b060

  • SHA1

    f85e3ab016c1566e810f554a9da18e488731c7cc

  • SHA256

    2cc7100ac0684b2c94e5268583e534b62d78859c35679a381616f2bca3f39676

  • SHA512

    1a3a5b75e8d7267b5cd4cc1aa4992f7cee93f0cf5f618a461a05a20c8bc57fc2dcec432b97456a14557585e9321cdfca6097a791fb12b9ba9b229b0ad129e7a3

  • SSDEEP

    98304:rG1KrbbKKQCJR5xyjycF1MnR/RE8+EGCZEBs7HPRSlfcLSHSlaj5W9PpBCMf:rG1KKCJrxOT1e2EGCZEGQeeyl7fF

Score
10/10
banloaddiscoverydownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      2cc7100ac0684b2c94e5268583e534b62d78859c35679a381616f2bca3f39676

    • Size

      6.7MB

    • MD5

      d5568bd7cb5aef02d1f19dbc9c42b060

    • SHA1

      f85e3ab016c1566e810f554a9da18e488731c7cc

    • SHA256

      2cc7100ac0684b2c94e5268583e534b62d78859c35679a381616f2bca3f39676

    • SHA512

      1a3a5b75e8d7267b5cd4cc1aa4992f7cee93f0cf5f618a461a05a20c8bc57fc2dcec432b97456a14557585e9321cdfca6097a791fb12b9ba9b229b0ad129e7a3

    • SSDEEP

      98304:rG1KrbbKKQCJR5xyjycF1MnR/RE8+EGCZEBs7HPRSlfcLSHSlaj5W9PpBCMf:rG1KKCJrxOT1e2EGCZEGQeeyl7fF

    Score
    10/10
    banloaddiscoverydownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks