banload | 68f39e13fccbfa295fd1dca6f9e613e92e15d3039f41d776f2eaa88fbc592016 | Triage

Sharing

General

Target

68f39e13fccbfa295fd1dca6f9e613e92e15d3039f41d776f2eaa88fbc592016
Size

2.3MB
Sample

250318-ye55hsxsgz
MD5

de4b490c5dcb39aebf233e127ebe4756
SHA1

b096e88a2d8617547c750b73fc6a1daca9dd4f0e
SHA256

68f39e13fccbfa295fd1dca6f9e613e92e15d3039f41d776f2eaa88fbc592016
SHA512

ac602163d3b12747cd90aa1e8ca74875ddb7bdd50b1d350e71c7f89ce6f5d06f60db959e8120d1757ea283ee41fb942d56472f2a218b7a619d99f3bf56d2700e
SSDEEP

49152:mOIq2/OmOiBTnUsvFVvjuu168B1ECYJgkoreAmZea+:mOh22mJUCFVvju268B+5J2SAmZeR

Score

10^/10

banload discovery downloader dropper trojan

Malware Config

Targets

- Target
  
  68f39e13fccbfa295fd1dca6f9e613e92e15d3039f41d776f2eaa88fbc592016
- Size
  
  2.3MB
- MD5
  
  de4b490c5dcb39aebf233e127ebe4756
- SHA1
  
  b096e88a2d8617547c750b73fc6a1daca9dd4f0e
- SHA256
  
  68f39e13fccbfa295fd1dca6f9e613e92e15d3039f41d776f2eaa88fbc592016
- SHA512
  
  ac602163d3b12747cd90aa1e8ca74875ddb7bdd50b1d350e71c7f89ce6f5d06f60db959e8120d1757ea283ee41fb942d56472f2a218b7a619d99f3bf56d2700e
- SSDEEP
  
  49152:mOIq2/OmOiBTnUsvFVvjuu168B1ECYJgkoreAmZea+:mOh22mJUCFVvju268B+5J2SAmZeR
Score

10^/10

banload discovery downloader dropper trojan
- Banload
  Banload variants download malicious files, then install and execute the files.
  trojan dropper downloader banload
- Banload family
  banload
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

banloaddiscoverydownloaderdroppertrojan

behavioral2

banloaddiscoverydownloaderdroppertrojan