General

  • Target

    9dd5fca5d6d106ce7e8f69d2b23880653bdef4d7226cd02ea6144d2c2ec7f32c

  • Size

    6.1MB

  • Sample

    250109-aj22nazjgw

  • MD5

    3a87dcec7b6e6aaab8a02d6405e9405b

  • SHA1

    65a19fcfe726846e754da83578522b777805488a

  • SHA256

    9dd5fca5d6d106ce7e8f69d2b23880653bdef4d7226cd02ea6144d2c2ec7f32c

  • SHA512

    4393bc2556ec2d7a2bcc24db05caf02e3b1a6bec4719d994b534d43b4cf421b0d9addcd5836dde47e507bee9c82d28dabb0cb011f0b5e91eeb512994f9ef8ac4

  • SSDEEP

    98304:xwRJA+mEeIhauDnu0VXwFO+mow/kHszF7L9vf9zAxStNm:kA+hJDfBwF1m1cHsz7hAxuNm

Malware Config

Targets

    • Target

      9dd5fca5d6d106ce7e8f69d2b23880653bdef4d7226cd02ea6144d2c2ec7f32c

    • Size

      6.1MB

    • MD5

      3a87dcec7b6e6aaab8a02d6405e9405b

    • SHA1

      65a19fcfe726846e754da83578522b777805488a

    • SHA256

      9dd5fca5d6d106ce7e8f69d2b23880653bdef4d7226cd02ea6144d2c2ec7f32c

    • SHA512

      4393bc2556ec2d7a2bcc24db05caf02e3b1a6bec4719d994b534d43b4cf421b0d9addcd5836dde47e507bee9c82d28dabb0cb011f0b5e91eeb512994f9ef8ac4

    • SSDEEP

      98304:xwRJA+mEeIhauDnu0VXwFO+mow/kHszF7L9vf9zAxStNm:kA+hJDfBwF1m1cHsz7hAxuNm

    • Banload

      Banload variants download malicious files, then install and execute the files.

    • Banload family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

MITRE ATT&CK Enterprise v15

Tasks