Overview

overview

10

Static

static

3

57962b59a9...93.exe

windows7-x64

10

57962b59a9...93.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57962b59a9dceb06f1a9a4d3815f129fdb15966bcac93a7c7ff067ddd0745c93

  • Size

    2.4MB

  • Sample

    240920-efhk3axbpb

  • MD5

    de1c56f1ebdaecbe8536a148d47eab06

  • SHA1

    c2bcd3ad819bf3562f0f9114802416339d6d79ee

  • SHA256

    57962b59a9dceb06f1a9a4d3815f129fdb15966bcac93a7c7ff067ddd0745c93

  • SHA512

    3bc93f2130f4786171afde91869bc9df377bab7b165b01fb35ea0a2382864107b79f8128aafd4f28f8a718a419eae76f5e97c5c7ddee1e663b4f48df31d59971

  • SSDEEP

    49152:wcz0AuUY2ziT8QWnZqgiqkvbm70q5VWy7EeNU+oGQu:wczkoZqgiqkvbiPtQAU+oNu

Score
10/10
banloaddiscoverydownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      57962b59a9dceb06f1a9a4d3815f129fdb15966bcac93a7c7ff067ddd0745c93

    • Size

      2.4MB

    • MD5

      de1c56f1ebdaecbe8536a148d47eab06

    • SHA1

      c2bcd3ad819bf3562f0f9114802416339d6d79ee

    • SHA256

      57962b59a9dceb06f1a9a4d3815f129fdb15966bcac93a7c7ff067ddd0745c93

    • SHA512

      3bc93f2130f4786171afde91869bc9df377bab7b165b01fb35ea0a2382864107b79f8128aafd4f28f8a718a419eae76f5e97c5c7ddee1e663b4f48df31d59971

    • SSDEEP

      49152:wcz0AuUY2ziT8QWnZqgiqkvbm70q5VWy7EeNU+oGQu:wczkoZqgiqkvbiPtQAU+oNu

    Score
    10/10
    banloaddiscoverydownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks