banload | fe82667df0bcf15973b1fa72aa0f888f1218de7f95d00122502513f3a5eece2a | Triage

Sharing

General

Target

fe82667df0bcf15973b1fa72aa0f888f1218de7f95d00122502513f3a5eece2a
Size

3.0MB
Sample

250404-dz113s1nz4
MD5

878297cb3316d5d6f10f1906987e5b4a
SHA1

e28bbcd184f52fc0bbec2ffe19ddf35a3450f6f6
SHA256

fe82667df0bcf15973b1fa72aa0f888f1218de7f95d00122502513f3a5eece2a
SHA512

cceeb6e6683056a674ddc0215387dfbf13d9557e3562aadd15d5464cef3f3bfaab6000c2c11aa797a1b033e06d759eb96ba8d984e92271f8277b0c455f334c7b
SSDEEP

49152:7pbRm4GPK/Mp2wTTMMOlsxgYJuXQEoVDn99c1/0VXi+Yosm+2sxo5tV:d1GS/6ClU0X3uDnu0VXi+YtmkxWtV

Score

10^/10

banload downloader dropper persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  fe82667df0bcf15973b1fa72aa0f888f1218de7f95d00122502513f3a5eece2a
- Size
  
  3.0MB
- MD5
  
  878297cb3316d5d6f10f1906987e5b4a
- SHA1
  
  e28bbcd184f52fc0bbec2ffe19ddf35a3450f6f6
- SHA256
  
  fe82667df0bcf15973b1fa72aa0f888f1218de7f95d00122502513f3a5eece2a
- SHA512
  
  cceeb6e6683056a674ddc0215387dfbf13d9557e3562aadd15d5464cef3f3bfaab6000c2c11aa797a1b033e06d759eb96ba8d984e92271f8277b0c455f334c7b
- SSDEEP
  
  49152:7pbRm4GPK/Mp2wTTMMOlsxgYJuXQEoVDn99c1/0VXi+Yosm+2sxo5tV:d1GS/6ClU0X3uDnu0VXi+YtmkxWtV
Score

10^/10

banload downloader dropper persistence privilege_escalation trojan
- Banload
  Banload variants download malicious files, then install and execute the files.
  trojan dropper downloader banload
- Banload family
  banload
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

banloaddownloaderdropperpersistenceprivilege_escalationtrojan