banload | 9814b8707ea6a0ed7da40dbc1310de58de476b39c4564200b65674cc66136731 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_3f843f1a94f5467cf9706be2d3a24deb
Size 17.3MB
Sample260104-xtf89swpe1
SHA256 9814b8707ea6a0ed7da40dbc1310de58de476b39c4564200b65674cc66136731
MD5 3f843f1a94f5467cf9706be2d3a24deb
SHA1 db10a833f8efc5c70e3504bed5338699e85415d0
SHA512 ee45f9a70ce86cfe5bbe5ea977b9616e7afe1886ae21924e773750e94a47ee0cbfc70b38d35f1a6eec3fb9560f2d8c2abfaf3d17665a5068447bbd2c3957b9fa
SSDEEP 393216:XpijP7Ia0y26k0NilQ7EYFZiWg0DN8bYtEl3/CxrY5:kvv3NN/j7VKbY6l3/Ck
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

banload discovery downloader dropper installer trojan

Malware Config

Targets

- Target
  JaffaCakes118_3f843f1a94f5467cf9706be2d3a24deb
- Size 17.3MB
- SHA256 9814b8707ea6a0ed7da40dbc1310de58de476b39c4564200b65674cc66136731
- MD5 3f843f1a94f5467cf9706be2d3a24deb
- SHA1 db10a833f8efc5c70e3504bed5338699e85415d0
- SHA512 ee45f9a70ce86cfe5bbe5ea977b9616e7afe1886ae21924e773750e94a47ee0cbfc70b38d35f1a6eec3fb9560f2d8c2abfaf3d17665a5068447bbd2c3957b9fa
- SSDEEP 393216:XpijP7Ia0y26k0NilQ7EYFZiWg0DN8bYtEl3/CxrY5:kvv3NN/j7VKbY6l3/Ck
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
- MD5 9384f4007c492d4fa040924f31c00166
- SHA1 aba37faef30d7c445584c688a0b5638f5db31c7b
- SHA512 68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
- SSDEEP 48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 7755ff2707ca19344d489a5acec02d9e310425fa6e100d2f13025761676b875b
- MD5 a4173b381625f9f12aadb4e1cdaefdb8
- SHA1 cf1680c2bc970d5675adbf5e89292a97e6724713
- SHA512 fcac79d42862da6bdd3ecad9d887a975cdff2301a8322f321be58f754a26b27077b452faa4751bbd09cd3371b4afce65255fbbb443e2c93dd2cba0ba652f4a82
- SSDEEP 96:2fiqP7bO2qHkAC40KhvSE+6nrxtMn0iGd88qRLqtJ1tbRhElfRx2:siqP7OHX1Q4xtcf8qo/ttgfRx2
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
- MD5 7579ade7ae1747a31960a228ce02e666
- SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
- SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsisdk.dll
- Size 28KB
- SHA256 fc7ab6a88fe725de19804931655f6c61d4072495ebb1ddb73ddfac0dca7d0d1e
- MD5 deb4db1ff057906c96e6f949e5862508
- SHA1 495c8703a43826df4ac8de20efbbeebcd5263c13
- SHA512 b37348d57d774b66afd192c0d2cb95c261ea4b75874190fd4809249cfea5500eaa0d9ad09af2afe83904b29539796440663d6e916362acf9c21894809ea32d46
- SSDEEP 384:Snw9iuDIPi/ij7m+1I+rqZTYmZLb/BLbyrDzbgVIdHk0iVqeyf/zBx+HUTRv:Sw1DSi/ija+1IHZzOzbgV+E0teyjG0
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  7za.exe
- Size 574KB
- SHA256 c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf
- MD5 42badc1d2f03a8b1e4875740d3d49336
- SHA1 cee178da1fb05f99af7a3547093122893bd1eb46
- SHA512 6bc519a7368ee6bd8c8f69f2d634dd18799b4ca31fbc284d2580ba625f3a88b6a52d2bc17bea0e75e63ca11c10356c47ee00c2c500294abcb5141424fc5dc71c
- SSDEEP 12288:myyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRI:mKvyNhXCV4E8BXAfrnkcAqU0A
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  AdsScheduler.exe
- Size 3.9MB
- SHA256 23460a83578d5ed51c1633bf41b71acd301b1b3f04ab931c3300da6d89aa4e99
- MD5 bb195385dd34acb86446c34f16089262
- SHA1 84a79bce0fa205a47d3eaf4cc5f6b795117424bd
- SHA512 4bdc56cbad69199d15033d7239a8679204febee35b002cfedad0dfadbce913b367db0685b39c95ba3d5a44f94bde566c2adaa987af45591c2b028f6f3414cdbd
- SSDEEP 98304:Xzwzk6whfJc+ewPS2NXW9PF/sbzPtMTLEzue+:UzQS2lW9ub23Ezu
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

discovery downloader dropper banload trojan
- Banload
  Banload variants download malicious files, then install and execute the files.
  trojan dropper downloader banload
- Banload family
  banload
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral17 behavioral18
- Target
  Base.exe
- Size 2.3MB
- SHA256 ed4666679bcaa1ca8ed70fc526525c6d4923d39c343fcaee1ea1bae05bb82837
- MD5 37dd4620414dc4c95607d180dcc288fe
- SHA1 7f636e83cf74a945b07f2109ef96a3af2f477310
- SHA512 03a475cdfd5d1ba8c123a8025bb473198297056dab3a8b7d7c1b8e45c44621daf136af4865e67c3922fa9f13b416a0a48a48fd7d4a878e33a060e094df5070fe
- SSDEEP 24576:Qy7gVCxI22ZlCQIjjG/mK7i6VtSeA/cQrtBESUtudZec4gxWLRzQYkZm2d+d1+og:L2CAi64rtOSUQGcJWLaXGHCxlYUV
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  Lang/Ar/help.chm
- Size 2.9MB
- SHA256 cd45ac1b4012d4379cd3464b8787aaa479dadd3ae87198d3d418241af381bab6
- MD5 72d6c26f43d0b14fdaabfd4d256da4ec
- SHA1 430e6778016f89e093489096bdfaef389ac1a367
- SHA512 71097d8c8ea6b4b82a3a3af41287d6f1d0b42959beb3607c40ab903e14dba97383fd0a43ac6fdcdcab6d01f83170f52e9d32c22ec2b141c26449653f2af146a9
- SSDEEP 49152:Q8IXPYzS9VHuRM6Gs6QcVX8q4XHkXyrjeNlsqqQIKx41a7Y9UzbYgsiWb12WXW1x:QhY0HuRPGsX8hIEC289QX4o7bYgsidBj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  Lang/Bg/help.chm
- Size 2.9MB
- SHA256 cd45ac1b4012d4379cd3464b8787aaa479dadd3ae87198d3d418241af381bab6
- MD5 72d6c26f43d0b14fdaabfd4d256da4ec
- SHA1 430e6778016f89e093489096bdfaef389ac1a367
- SHA512 71097d8c8ea6b4b82a3a3af41287d6f1d0b42959beb3607c40ab903e14dba97383fd0a43ac6fdcdcab6d01f83170f52e9d32c22ec2b141c26449653f2af146a9
- SSDEEP 49152:Q8IXPYzS9VHuRM6Gs6QcVX8q4XHkXyrjeNlsqqQIKx41a7Y9UzbYgsiWb12WXW1x:QhY0HuRPGsX8hIEC289QX4o7bYgsidBj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  Lang/Da/help.chm
- Size 2.9MB
- SHA256 cd45ac1b4012d4379cd3464b8787aaa479dadd3ae87198d3d418241af381bab6
- MD5 72d6c26f43d0b14fdaabfd4d256da4ec
- SHA1 430e6778016f89e093489096bdfaef389ac1a367
- SHA512 71097d8c8ea6b4b82a3a3af41287d6f1d0b42959beb3607c40ab903e14dba97383fd0a43ac6fdcdcab6d01f83170f52e9d32c22ec2b141c26449653f2af146a9
- SSDEEP 49152:Q8IXPYzS9VHuRM6Gs6QcVX8q4XHkXyrjeNlsqqQIKx41a7Y9UzbYgsiWb12WXW1x:QhY0HuRPGsX8hIEC289QX4o7bYgsidBj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  Lang/De/help.chm
- Size 2.9MB
- SHA256 cd45ac1b4012d4379cd3464b8787aaa479dadd3ae87198d3d418241af381bab6
- MD5 72d6c26f43d0b14fdaabfd4d256da4ec
- SHA1 430e6778016f89e093489096bdfaef389ac1a367
- SHA512 71097d8c8ea6b4b82a3a3af41287d6f1d0b42959beb3607c40ab903e14dba97383fd0a43ac6fdcdcab6d01f83170f52e9d32c22ec2b141c26449653f2af146a9
- SSDEEP 49152:Q8IXPYzS9VHuRM6Gs6QcVX8q4XHkXyrjeNlsqqQIKx41a7Y9UzbYgsiWb12WXW1x:QhY0HuRPGsX8hIEC289QX4o7bYgsidBj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  Lang/En/help.chm
- Size 2.9MB
- SHA256 cd45ac1b4012d4379cd3464b8787aaa479dadd3ae87198d3d418241af381bab6
- MD5 72d6c26f43d0b14fdaabfd4d256da4ec
- SHA1 430e6778016f89e093489096bdfaef389ac1a367
- SHA512 71097d8c8ea6b4b82a3a3af41287d6f1d0b42959beb3607c40ab903e14dba97383fd0a43ac6fdcdcab6d01f83170f52e9d32c22ec2b141c26449653f2af146a9
- SSDEEP 49152:Q8IXPYzS9VHuRM6Gs6QcVX8q4XHkXyrjeNlsqqQIKx41a7Y9UzbYgsiWb12WXW1x:QhY0HuRPGsX8hIEC289QX4o7bYgsidBj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  Lang/Es/help.chm
- Size 2.9MB
- SHA256 cd45ac1b4012d4379cd3464b8787aaa479dadd3ae87198d3d418241af381bab6
- MD5 72d6c26f43d0b14fdaabfd4d256da4ec
- SHA1 430e6778016f89e093489096bdfaef389ac1a367
- SHA512 71097d8c8ea6b4b82a3a3af41287d6f1d0b42959beb3607c40ab903e14dba97383fd0a43ac6fdcdcab6d01f83170f52e9d32c22ec2b141c26449653f2af146a9
- SSDEEP 49152:Q8IXPYzS9VHuRM6Gs6QcVX8q4XHkXyrjeNlsqqQIKx41a7Y9UzbYgsiWb12WXW1x:QhY0HuRPGsX8hIEC289QX4o7bYgsidBj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

discoverydownloaderdropperbanloadtrojan

behavioral18

discoverydownloaderdropperbanloadtrojan

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32