General
-
Target
7e978df0dfa6022b0599e547088e4f1b2477be25d3891cb9524a3a2d38dad0e0
-
Size
6.1MB
-
Sample
250312-r26agatvas
-
MD5
6b9e2aa9c60c61157fd2ef95407ee46f
-
SHA1
d8818ffe4afde5ab12ce36343fc479f60e71f072
-
SHA256
7e978df0dfa6022b0599e547088e4f1b2477be25d3891cb9524a3a2d38dad0e0
-
SHA512
f8cab97242076fe5693bb7afba7d22db0fe606c5cecad0afe96673c6e2a8286499a879cba3ae18822aed0bb46a806e7c6d421aa6d947a3284ffa37ebbf059ad5
-
SSDEEP
98304:F9nkzWA+B9lFItuDnu0VX4cK+hTeaxStNm:bfA+nDDfBZbhSaxuNm
Static task
static1
Behavioral task
behavioral1
Sample
7e978df0dfa6022b0599e547088e4f1b2477be25d3891cb9524a3a2d38dad0e0.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7e978df0dfa6022b0599e547088e4f1b2477be25d3891cb9524a3a2d38dad0e0.dll
Resource
win10v2004-20250217-en
Malware Config
Targets
-
-
Target
7e978df0dfa6022b0599e547088e4f1b2477be25d3891cb9524a3a2d38dad0e0
-
Size
6.1MB
-
MD5
6b9e2aa9c60c61157fd2ef95407ee46f
-
SHA1
d8818ffe4afde5ab12ce36343fc479f60e71f072
-
SHA256
7e978df0dfa6022b0599e547088e4f1b2477be25d3891cb9524a3a2d38dad0e0
-
SHA512
f8cab97242076fe5693bb7afba7d22db0fe606c5cecad0afe96673c6e2a8286499a879cba3ae18822aed0bb46a806e7c6d421aa6d947a3284ffa37ebbf059ad5
-
SSDEEP
98304:F9nkzWA+B9lFItuDnu0VX4cK+hTeaxStNm:bfA+nDDfBZbhSaxuNm
-
Banload
Banload variants download malicious files, then install and execute the files.
-
Banload family
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-