Overview

overview

10

Static

static

1

9f4dd3598d...c3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f4dd3598d8f63938cb326a8b398a2ada8eb46c9638a2fa89820f839a9e1ccc3

  • Size

    2.5MB

  • Sample

    250409-vx83caxxct

  • MD5

    51e1fea93eac10b377555f5dce180b76

  • SHA1

    643fe440be44fd2f6c90c5ad44851a2e3dd33ec8

  • SHA256

    9f4dd3598d8f63938cb326a8b398a2ada8eb46c9638a2fa89820f839a9e1ccc3

  • SHA512

    b8cfb63f2981c9a7346d3e412970ed3822c13fe651d95f5b069e516f2713ddc1713ec8ab322e71ef143035329c022f206e0d48d1776c6db19d9c4eea2e274d65

  • SSDEEP

    49152:zthaIp6ZcCzFrTG7eeGmdxNSl8naqbAqgwDWIi6pP40PGMr:zthhYZZ07e6W8nbbAqgwDWspP4Y

Score
10/10
banloaddefense_evasiondiscoverydownloaderdroppertrojan

Malware Config

Targets

    • Target

      9f4dd3598d8f63938cb326a8b398a2ada8eb46c9638a2fa89820f839a9e1ccc3

    • Size

      2.5MB

    • MD5

      51e1fea93eac10b377555f5dce180b76

    • SHA1

      643fe440be44fd2f6c90c5ad44851a2e3dd33ec8

    • SHA256

      9f4dd3598d8f63938cb326a8b398a2ada8eb46c9638a2fa89820f839a9e1ccc3

    • SHA512

      b8cfb63f2981c9a7346d3e412970ed3822c13fe651d95f5b069e516f2713ddc1713ec8ab322e71ef143035329c022f206e0d48d1776c6db19d9c4eea2e274d65

    • SSDEEP

      49152:zthaIp6ZcCzFrTG7eeGmdxNSl8naqbAqgwDWIi6pP40PGMr:zthhYZZ07e6W8nbbAqgwDWspP4Y

    Score
    10/10
    banloaddefense_evasiondiscoverydownloaderdroppertrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Banload family

      banload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      defense_evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks