Overview

overview

10

Static

static

1

2024-10-26...ia.exe

windows7-x64

10

2024-10-26...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-26_0a9776e3091145c00a99dba45bceb60b_hijackloader_mafia

  • Size

    2.0MB

  • Sample

    241026-b5na3ayfmk

  • MD5

    0a9776e3091145c00a99dba45bceb60b

  • SHA1

    3a662c9d0b3ae4518500fa177a16e31fe8950530

  • SHA256

    780b1316c626a3ae278eaf9704b43fd85b9c672f52714b5973f4d8caa825dacd

  • SHA512

    59f484f59f6ae315d21355476b6bf1f8b86a1a5fbe3cc84590460ffa77a68d90427c759478527ebdc0a5eb09ab66705daf52c9665dde5193c3276a567b37cd55

  • SSDEEP

    49152:U7KjN8WXWTbVYw3Lk9Qkza2is0q5VWy7EeNZVcod:U7KKn/3Lk9Qkza2FPtQA9d

Score
10/10
banloaddiscoverydownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      2024-10-26_0a9776e3091145c00a99dba45bceb60b_hijackloader_mafia

    • Size

      2.0MB

    • MD5

      0a9776e3091145c00a99dba45bceb60b

    • SHA1

      3a662c9d0b3ae4518500fa177a16e31fe8950530

    • SHA256

      780b1316c626a3ae278eaf9704b43fd85b9c672f52714b5973f4d8caa825dacd

    • SHA512

      59f484f59f6ae315d21355476b6bf1f8b86a1a5fbe3cc84590460ffa77a68d90427c759478527ebdc0a5eb09ab66705daf52c9665dde5193c3276a567b37cd55

    • SSDEEP

      49152:U7KjN8WXWTbVYw3Lk9Qkza2is0q5VWy7EeNZVcod:U7KKn/3Lk9Qkza2FPtQA9d

    Score
    10/10
    banloaddiscoverydownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Banload family

      banload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks