General

  • Target

    2025-01-23_42fb4282bac3e90bdf15aff5c45438ef_mafia

  • Size

    3.1MB

  • Sample

    250123-22xcnsxngs

  • MD5

    42fb4282bac3e90bdf15aff5c45438ef

  • SHA1

    55b0a13eb17128f5d100b9f9d18cd0e136665b18

  • SHA256

    70ff9cf6fcf072a69b6dc3144dd240002c1b3a08987b9ff42bcdcb7112c6145e

  • SHA512

    b44e40de7d18fb781e681befe557b0c02f947d4591472e19e8e3074f848162097285b8bf52995061926a8956c62c25bfc04bcf4545652969a0a96488c754fd2d

  • SSDEEP

    49152:1uWJCbWi8qRTNo1tGgyOGUL68B1ECYJgkaRma2sx05tE:1ugCSido3GgyOGG68B+5JMRmAxStE

Malware Config

Targets

    • Target

      2025-01-23_42fb4282bac3e90bdf15aff5c45438ef_mafia

    • Size

      3.1MB

    • MD5

      42fb4282bac3e90bdf15aff5c45438ef

    • SHA1

      55b0a13eb17128f5d100b9f9d18cd0e136665b18

    • SHA256

      70ff9cf6fcf072a69b6dc3144dd240002c1b3a08987b9ff42bcdcb7112c6145e

    • SHA512

      b44e40de7d18fb781e681befe557b0c02f947d4591472e19e8e3074f848162097285b8bf52995061926a8956c62c25bfc04bcf4545652969a0a96488c754fd2d

    • SSDEEP

      49152:1uWJCbWi8qRTNo1tGgyOGUL68B1ECYJgkaRma2sx05tE:1ugCSido3GgyOGG68B+5JMRmAxStE

    • Banload

      Banload variants download malicious files, then install and execute the files.

    • Banload family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks