Overview

overview

10

Static

static

3

2533c55c71...38.exe

windows7-x64

10

2533c55c71...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2533c55c719d1ad97a05d2355136d6a8cf15eaf36c01dd70450a740291f7a538.exe

  • Size

    3.3MB

  • Sample

    241203-a6vwvsxlek

  • MD5

    bf82d2c331398018750c202bd9f02e3d

  • SHA1

    495d6af8bd5729e577d83bae342d420a88676ccc

  • SHA256

    2533c55c719d1ad97a05d2355136d6a8cf15eaf36c01dd70450a740291f7a538

  • SHA512

    a05396adf45cf6147271c3568b13e6085e09cff105e476cc272a86bb176bc0be1b328a35fb728e1aeeb0fef2fa93fa3a1947362ed8555bfad2546c4944a84d2c

  • SSDEEP

    98304:RF8QUitE4iLqaPWGnEvSdsc0B18YhT8qM:RFQWEPnPBnEKd50P8YhT81

Score
10/10
banloaddiscoverydownloaderdropperevasionransomwaretrojan

Malware Config

Targets

    • Target

      2533c55c719d1ad97a05d2355136d6a8cf15eaf36c01dd70450a740291f7a538.exe

    • Size

      3.3MB

    • MD5

      bf82d2c331398018750c202bd9f02e3d

    • SHA1

      495d6af8bd5729e577d83bae342d420a88676ccc

    • SHA256

      2533c55c719d1ad97a05d2355136d6a8cf15eaf36c01dd70450a740291f7a538

    • SHA512

      a05396adf45cf6147271c3568b13e6085e09cff105e476cc272a86bb176bc0be1b328a35fb728e1aeeb0fef2fa93fa3a1947362ed8555bfad2546c4944a84d2c

    • SSDEEP

      98304:RF8QUitE4iLqaPWGnEvSdsc0B18YhT8qM:RFQWEPnPBnEKd50P8YhT81

    Score
    10/10
    banloaddiscoverydownloaderdropperevasionransomwaretrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Banload family

      banload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Renames multiple (216) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks