Overview

overview

10

Static

static

3

0d37a9ad99...f7.exe

windows7-x64

10

0d37a9ad99...f7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d37a9ad99ad4573ae16ff449544b4c6727bfbb2814b801bce7017aac4a922f7.exe

  • Size

    3.7MB

  • Sample

    250107-s3mp7axlbw

  • MD5

    db358bf02b161dfe254dbf9e993fce8f

  • SHA1

    140ee2d9e67a82ac072766c0fefeac5ddf94d326

  • SHA256

    0d37a9ad99ad4573ae16ff449544b4c6727bfbb2814b801bce7017aac4a922f7

  • SHA512

    55fb0a70b4f111458c23e9ddf473f9657831083d2f78a181f710f602cb15fdf8b833d7afb653c3c3da40097614c80a5ed41cfbb41b410a0dca9c98a17f1e69b0

  • SSDEEP

    98304:RF8QUitE4iLqaPWGnEvK7RkOEEo+A7mOk3oC:RFQWEPnPBnEXm

Score
10/10
banloaddiscoverydownloaderdropperevasionransomwaretrojan

Malware Config

Targets

    • Target

      0d37a9ad99ad4573ae16ff449544b4c6727bfbb2814b801bce7017aac4a922f7.exe

    • Size

      3.7MB

    • MD5

      db358bf02b161dfe254dbf9e993fce8f

    • SHA1

      140ee2d9e67a82ac072766c0fefeac5ddf94d326

    • SHA256

      0d37a9ad99ad4573ae16ff449544b4c6727bfbb2814b801bce7017aac4a922f7

    • SHA512

      55fb0a70b4f111458c23e9ddf473f9657831083d2f78a181f710f602cb15fdf8b833d7afb653c3c3da40097614c80a5ed41cfbb41b410a0dca9c98a17f1e69b0

    • SSDEEP

      98304:RF8QUitE4iLqaPWGnEvK7RkOEEo+A7mOk3oC:RFQWEPnPBnEXm

    Score
    10/10
    banloaddiscoverydownloaderdropperevasionransomwaretrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Banload family

      banload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Renames multiple (154) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks