Overview

overview

10

Static

static

3

9e1568b241...20.dll

windows10-2004-x64

10

9e1568b241...20.dll

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    9e1568b241efec984edc2971b8eddc9345b341f35095c4da1751a1dbaebe6020
  • Size 3.5MB
  • Sample251217-bfj74sfm2w
  • SHA256 9e1568b241efec984edc2971b8eddc9345b341f35095c4da1751a1dbaebe6020
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
banloaddownloaderdropperpersistenceprivilege_escalationtrojan

Malware Config

Targets

    • Target
      9e1568b241efec984edc2971b8eddc9345b341f35095c4da1751a1dbaebe6020
    • Size 3.5MB
    • SHA256 9e1568b241efec984edc2971b8eddc9345b341f35095c4da1751a1dbaebe6020
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    downloaderdropperbanloadpersistenceprivilege_escalationtrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Banload family

      banload

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

      persistenceprivilege_escalation
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks