banload | 7efe229baf4b895a5fa92f3ee6d6e78c971abbdf18a3bfb4eb042d683c1d8aea | Triage

Sharing

General

Target

7efe229baf4b895a5fa92f3ee6d6e78c971abbdf18a3bfb4eb042d683c1d8aea
Size

2.4MB
Sample

240901-bq3r7swgqr
MD5

7943c8ad270e9ead9d2cfcced85895f6
SHA1

0c1d6decd4c9ca6984ba0adb8a827724f9e89599
SHA256

7efe229baf4b895a5fa92f3ee6d6e78c971abbdf18a3bfb4eb042d683c1d8aea
SHA512

795c36a2bc93de5925b4f45d8b715f6fb47752cf9b7452f642c2e33d6e2952fc234e50b5810ea814f6e9045c802b525be10f6ecba52596d2ee17ab4980b9d5fc
SSDEEP

49152:3cv0srPX2TOmDYgPyvwItZP0q5VWy7EeNxrQg1oc78ymLQ2jTDaD5nt6Wy:3cvRQMgPyvwItZPPtQAxrQPahms2jTDf

Score

10^/10

banload discovery downloader dropper evasion trojan

Malware Config

Targets

- Target
  
  7efe229baf4b895a5fa92f3ee6d6e78c971abbdf18a3bfb4eb042d683c1d8aea
- Size
  
  2.4MB
- MD5
  
  7943c8ad270e9ead9d2cfcced85895f6
- SHA1
  
  0c1d6decd4c9ca6984ba0adb8a827724f9e89599
- SHA256
  
  7efe229baf4b895a5fa92f3ee6d6e78c971abbdf18a3bfb4eb042d683c1d8aea
- SHA512
  
  795c36a2bc93de5925b4f45d8b715f6fb47752cf9b7452f642c2e33d6e2952fc234e50b5810ea814f6e9045c802b525be10f6ecba52596d2ee17ab4980b9d5fc
- SSDEEP
  
  49152:3cv0srPX2TOmDYgPyvwItZP0q5VWy7EeNxrQg1oc78ymLQ2jTDaD5nt6Wy:3cvRQMgPyvwItZPPtQAxrQPahms2jTDf
Score

10^/10

banload discovery downloader dropper evasion trojan
- Banload
  Banload variants download malicious files, then install and execute the files.
  trojan dropper downloader banload
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

banloaddiscoverydownloaderdropperevasiontrojan

behavioral2

banloaddiscoverydownloaderdropperevasiontrojan