General

  • Target

    21297b1919c019db142df8452ad087f464f66a82a353cfea8b886eedb9fbb8f4.exe

  • Size

    312KB

  • Sample

    240519-l1vvfsdb5z

  • MD5

    39b1782b330b6d0d5d6aa4fc74499e27

  • SHA1

    97ebbbc2e10c746fd36ecd8423c4e2444aa3aaac

  • SHA256

    21297b1919c019db142df8452ad087f464f66a82a353cfea8b886eedb9fbb8f4

  • SHA512

    58f2e999cc7a72f77a4e83001cd48a5bb014cef124bfd6dd85a5ed8a9a89153cc0af8317bf0cedba5dd7cf326eb5b71fe3f19086827bde3f1fa9c46e88b725d0

  • SSDEEP

    6144:/cm4FmowdHoSyZuo3F2Y9iE9MAkOCOu0EajNVBZr6y2WfcE:N4wFHoSMu49P9micE

Malware Config

Targets

    • Target

      21297b1919c019db142df8452ad087f464f66a82a353cfea8b886eedb9fbb8f4.exe

    • Size

      312KB

    • MD5

      39b1782b330b6d0d5d6aa4fc74499e27

    • SHA1

      97ebbbc2e10c746fd36ecd8423c4e2444aa3aaac

    • SHA256

      21297b1919c019db142df8452ad087f464f66a82a353cfea8b886eedb9fbb8f4

    • SHA512

      58f2e999cc7a72f77a4e83001cd48a5bb014cef124bfd6dd85a5ed8a9a89153cc0af8317bf0cedba5dd7cf326eb5b71fe3f19086827bde3f1fa9c46e88b725d0

    • SSDEEP

      6144:/cm4FmowdHoSyZuo3F2Y9iE9MAkOCOu0EajNVBZr6y2WfcE:N4wFHoSMu49P9micE

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks