Overview

overview

10

Static

static

3

a45c1970f4...3c.exe

windows7-x64

10

a45c1970f4...3c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a45c1970f44ad36fbfef9f34784ada6d551fb03e5bcc2d2d903637d37d045a3c.exe

  • Size

    3.3MB

  • Sample

    241218-mrmm6awrdj

  • MD5

    5e08f09ea0f781dc13ec16a3ed71f2ad

  • SHA1

    edb5e01e73a27297705ba5f75ee50b0f68c3a315

  • SHA256

    a45c1970f44ad36fbfef9f34784ada6d551fb03e5bcc2d2d903637d37d045a3c

  • SHA512

    33acc7ac460a434a54a1abe3eb3b805a1e9e3f51526d8b76f5c80b703f031bcf9aa34ef1e9044099de95dd01cf1b402126194268db0a9099d9787c82982aaacd

  • SSDEEP

    49152:kSP6QPXU3GT6Vohg4N6GtMyMpy7vvKjBpgeu3W7jUcPPlR1X5mo+KH2cCPQAG6:kSPbQp4NxPWG8PgN3CJR1X5mo+VPQw

Score
10/10
banloaddiscoverydownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      a45c1970f44ad36fbfef9f34784ada6d551fb03e5bcc2d2d903637d37d045a3c.exe

    • Size

      3.3MB

    • MD5

      5e08f09ea0f781dc13ec16a3ed71f2ad

    • SHA1

      edb5e01e73a27297705ba5f75ee50b0f68c3a315

    • SHA256

      a45c1970f44ad36fbfef9f34784ada6d551fb03e5bcc2d2d903637d37d045a3c

    • SHA512

      33acc7ac460a434a54a1abe3eb3b805a1e9e3f51526d8b76f5c80b703f031bcf9aa34ef1e9044099de95dd01cf1b402126194268db0a9099d9787c82982aaacd

    • SSDEEP

      49152:kSP6QPXU3GT6Vohg4N6GtMyMpy7vvKjBpgeu3W7jUcPPlR1X5mo+KH2cCPQAG6:kSPbQp4NxPWG8PgN3CJR1X5mo+VPQw

    Score
    10/10
    banloaddiscoverydownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Banload family

      banload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks