Overview

overview

7

Static

static

3

banking_trojan2.dll

windows10-2004-x64

5

banking_trojan2.dll

windows11-ltsc_2024-x64

5

run_br2.bat

windows10-2004-x64

7

run_br2.bat

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    nevoeiro_br2.zip
  • Size 673.8MB
  • Sample260713-x2xafsft2n
  • SHA256 4ae8d3547e5e8af6c6bb8758348ea233a35cb9b3a780eae5aa1745c6c1b2976e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwaredefense_evasiondiscoveryexecutionpersistencespyware

Malware Config

Targets

    • Target
      banking_trojan2.dll
    • Size 673.8MB
    • SHA256 94b0684d0dcd7dc59a7194f0b4cb2c1df9b6c3063e394068e021ccda96d6d30e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2
    • Target
      run_br2.bat
    • Size 1KB
    • SHA256 904d0d2f50e7c6b416becbcd3bcce18aabc854bce80d614ef794c7962978b582
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    adwaredefense_evasiondiscoveryexecutionpersistencespyware

    • Loads dropped DLL

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks