General
-
Target
9dd5fca5d6d106ce7e8f69d2b23880653bdef4d7226cd02ea6144d2c2ec7f32c
-
Size
6.1MB
-
Sample
250109-aj22nazjgw
-
MD5
3a87dcec7b6e6aaab8a02d6405e9405b
-
SHA1
65a19fcfe726846e754da83578522b777805488a
-
SHA256
9dd5fca5d6d106ce7e8f69d2b23880653bdef4d7226cd02ea6144d2c2ec7f32c
-
SHA512
4393bc2556ec2d7a2bcc24db05caf02e3b1a6bec4719d994b534d43b4cf421b0d9addcd5836dde47e507bee9c82d28dabb0cb011f0b5e91eeb512994f9ef8ac4
-
SSDEEP
98304:xwRJA+mEeIhauDnu0VXwFO+mow/kHszF7L9vf9zAxStNm:kA+hJDfBwF1m1cHsz7hAxuNm
Static task
static1
Behavioral task
behavioral1
Sample
9dd5fca5d6d106ce7e8f69d2b23880653bdef4d7226cd02ea6144d2c2ec7f32c.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9dd5fca5d6d106ce7e8f69d2b23880653bdef4d7226cd02ea6144d2c2ec7f32c.dll
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
9dd5fca5d6d106ce7e8f69d2b23880653bdef4d7226cd02ea6144d2c2ec7f32c
-
Size
6.1MB
-
MD5
3a87dcec7b6e6aaab8a02d6405e9405b
-
SHA1
65a19fcfe726846e754da83578522b777805488a
-
SHA256
9dd5fca5d6d106ce7e8f69d2b23880653bdef4d7226cd02ea6144d2c2ec7f32c
-
SHA512
4393bc2556ec2d7a2bcc24db05caf02e3b1a6bec4719d994b534d43b4cf421b0d9addcd5836dde47e507bee9c82d28dabb0cb011f0b5e91eeb512994f9ef8ac4
-
SSDEEP
98304:xwRJA+mEeIhauDnu0VXwFO+mow/kHszF7L9vf9zAxStNm:kA+hJDfBwF1m1cHsz7hAxuNm
-
Banload
Banload variants download malicious files, then install and execute the files.
-
Banload family
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-