General

  • Target

    7e978df0dfa6022b0599e547088e4f1b2477be25d3891cb9524a3a2d38dad0e0

  • Size

    6.1MB

  • Sample

    250312-r26agatvas

  • MD5

    6b9e2aa9c60c61157fd2ef95407ee46f

  • SHA1

    d8818ffe4afde5ab12ce36343fc479f60e71f072

  • SHA256

    7e978df0dfa6022b0599e547088e4f1b2477be25d3891cb9524a3a2d38dad0e0

  • SHA512

    f8cab97242076fe5693bb7afba7d22db0fe606c5cecad0afe96673c6e2a8286499a879cba3ae18822aed0bb46a806e7c6d421aa6d947a3284ffa37ebbf059ad5

  • SSDEEP

    98304:F9nkzWA+B9lFItuDnu0VX4cK+hTeaxStNm:bfA+nDDfBZbhSaxuNm

Malware Config

Targets

    • Target

      7e978df0dfa6022b0599e547088e4f1b2477be25d3891cb9524a3a2d38dad0e0

    • Size

      6.1MB

    • MD5

      6b9e2aa9c60c61157fd2ef95407ee46f

    • SHA1

      d8818ffe4afde5ab12ce36343fc479f60e71f072

    • SHA256

      7e978df0dfa6022b0599e547088e4f1b2477be25d3891cb9524a3a2d38dad0e0

    • SHA512

      f8cab97242076fe5693bb7afba7d22db0fe606c5cecad0afe96673c6e2a8286499a879cba3ae18822aed0bb46a806e7c6d421aa6d947a3284ffa37ebbf059ad5

    • SSDEEP

      98304:F9nkzWA+B9lFItuDnu0VX4cK+hTeaxStNm:bfA+nDDfBZbhSaxuNm

    • Banload

      Banload variants download malicious files, then install and execute the files.

    • Banload family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

MITRE ATT&CK Enterprise v15

Tasks