General

  • Target

    ee184311bf0af7818bc1bcd1ae4c04d0.exe.bin.exe

  • Size

    248KB

  • Sample

    240518-t8as9adb62

  • MD5

    ee184311bf0af7818bc1bcd1ae4c04d0

  • SHA1

    9032c6a02d53eec7397497ff01ce6bd7779fe3ba

  • SHA256

    f5c041b7e660e90b3b5388c122a4783620c423a0a788d2ccba591f9a086051bb

  • SHA512

    406fe6a3fe5b4deab59609fc7c9c604e2ddde9ed63bf5cd21a11796ba0065b06e7fda00d0143010a10593998c8da3e6d9af7af6ab170946bcdf61e892c76b92d

  • SSDEEP

    3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+s:ccm4FmowdHoSi9EIBftapTs4WZazJ

Malware Config

Targets

    • Target

      ee184311bf0af7818bc1bcd1ae4c04d0.exe.bin.exe

    • Size

      248KB

    • MD5

      ee184311bf0af7818bc1bcd1ae4c04d0

    • SHA1

      9032c6a02d53eec7397497ff01ce6bd7779fe3ba

    • SHA256

      f5c041b7e660e90b3b5388c122a4783620c423a0a788d2ccba591f9a086051bb

    • SHA512

      406fe6a3fe5b4deab59609fc7c9c604e2ddde9ed63bf5cd21a11796ba0065b06e7fda00d0143010a10593998c8da3e6d9af7af6ab170946bcdf61e892c76b92d

    • SSDEEP

      3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLpcgDE4JBuItR8pTsgZ9WT4iaz+s:ccm4FmowdHoSi9EIBftapTs4WZazJ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks