banload | 816e5da039753afeaca2c427a59912698b5962c43404532d6346933ae83280f8 | Triage

Sharing

General

Target

816e5da039753afeaca2c427a59912698b5962c43404532d6346933ae83280f8N.exe
Size

110KB
Sample

241231-x7ebtsvqc1
MD5

ba5adf14c4396af9076bb34dd00aaec0
SHA1

3ca95676bcbc556238df914ae647e33c9cc745a8
SHA256

816e5da039753afeaca2c427a59912698b5962c43404532d6346933ae83280f8
SHA512

ae09488164cadb72b4bc30de6e92767de8b57320aa8c639f082fa3e3aeeb0981fb442708621dc0cddb1705efc30c6dee6a6ea3c627305ad5b4d21f29f10ddaf0
SSDEEP

1536:BLXB65939tY6HBg4sXJ1UviBhkohVKJjFhaLeT99+eLnV7UviBhkohVKJjFhvOcV:BLk395hYXJ1UvUWXsP2npUvUWX81s

Score

10^/10

banload discovery downloader dropper evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  816e5da039753afeaca2c427a59912698b5962c43404532d6346933ae83280f8N.exe
- Size
  
  110KB
- MD5
  
  ba5adf14c4396af9076bb34dd00aaec0
- SHA1
  
  3ca95676bcbc556238df914ae647e33c9cc745a8
- SHA256
  
  816e5da039753afeaca2c427a59912698b5962c43404532d6346933ae83280f8
- SHA512
  
  ae09488164cadb72b4bc30de6e92767de8b57320aa8c639f082fa3e3aeeb0981fb442708621dc0cddb1705efc30c6dee6a6ea3c627305ad5b4d21f29f10ddaf0
- SSDEEP
  
  1536:BLXB65939tY6HBg4sXJ1UviBhkohVKJjFhaLeT99+eLnV7UviBhkohVKJjFhvOcV:BLk395hYXJ1UvUWXsP2npUvUWX81s
Score

10^/10

discovery banload downloader dropper evasion spyware stealer trojan
- Banload
  Banload variants download malicious files, then install and execute the files.
  trojan dropper downloader banload
- Banload family
  banload
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Virtualization/Sandbox Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

banloaddiscoverydownloaderdropperevasionspywarestealertrojan