Analysis
-
max time kernel
103s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20250313-en -
resource tags
-
submitted
17/03/2025, 00:42
General
-
Target
abef29a0f9056beda2dba3faa5d42b069d0880437c80fbe65e27ebd6d2bbfdac.exe
-
Size
2.1MB
-
MD5
1bb2c884abfc605fa496242bdac65b78
-
SHA1
bc24248113fabf1a963c3be78bc2d03524e37bbf
-
SHA256
abef29a0f9056beda2dba3faa5d42b069d0880437c80fbe65e27ebd6d2bbfdac
-
SHA512
dd2c0e62cb09ee208d149cc538531d9ce51d46da3137e44533f9ca436060bf855373d8b54deee323a858e088d4afbad5f398bb31a7c7346a908a6542d1ac10a5
-
SSDEEP
49152:upbRm4GPK/M62mTsPOfY2HTmktexoVDn99c1/0VXKcgSdc+:u1GS/hf7Vt0uDnu0VXRBB
Score
10/10
Malware Config
Signatures
-
Banload
Banload variants download malicious files, then install and execute the files.
-
Banload family
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Modifies registry class 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\abef29a0f9056beda2dba3faa5d42b069d0880437c80fbe65e27ebd6d2bbfdac.exe"C:\Users\Admin\AppData\Local\Temp\abef29a0f9056beda2dba3faa5d42b069d0880437c80fbe65e27ebd6d2bbfdac.exe"1⤵
- Checks BIOS information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
2.7MB
-
Filesize
1.9MB
-
Filesize
2.7MB
-
Filesize
4KB
-
Filesize
1.9MB
-
Filesize
2.7MB