General

  • Target

    2025-03-14_eea6be70d84d4668a4aac9739a4a0d7c_mafia

  • Size

    3.1MB

  • Sample

    250314-ffsayawms5

  • MD5

    eea6be70d84d4668a4aac9739a4a0d7c

  • SHA1

    56eb1a1354cd846632e4005e39a158b77726526b

  • SHA256

    0654e183ef58f3ab0f036690fe1a666eaef2387e622645dd8ca25cd1d19a7d85

  • SHA512

    b412531bed426c2fabda1a37120406e0b60cf54ed7328518e39926e481c2caede260fe2b614242a31a1088864e4d44050fa12412c91aa0fb2c0668bad9036c5c

  • SSDEEP

    49152:OuWJCbWiFqRTN/qYthAstP768B1ECYJgkFRrma2sx05tE:OugCSie/TthAstD68B+5J/RrmAxStE

Malware Config

Targets

    • Target

      2025-03-14_eea6be70d84d4668a4aac9739a4a0d7c_mafia

    • Size

      3.1MB

    • MD5

      eea6be70d84d4668a4aac9739a4a0d7c

    • SHA1

      56eb1a1354cd846632e4005e39a158b77726526b

    • SHA256

      0654e183ef58f3ab0f036690fe1a666eaef2387e622645dd8ca25cd1d19a7d85

    • SHA512

      b412531bed426c2fabda1a37120406e0b60cf54ed7328518e39926e481c2caede260fe2b614242a31a1088864e4d44050fa12412c91aa0fb2c0668bad9036c5c

    • SSDEEP

      49152:OuWJCbWiFqRTN/qYthAstP768B1ECYJgkFRrma2sx05tE:OugCSie/TthAstD68B+5J/RrmAxStE

    • Banload

      Banload variants download malicious files, then install and execute the files.

    • Banload family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks