General

  • Target

    44b7f19132ddbad4f0b564c6cf0a32e9c18cbf95fad02ab69bcc440b8bb4c9a6.exe

  • Size

    352KB

  • Sample

    240522-1qc9zsac59

  • MD5

    1382b1da38a9b96dbf4de51472b03f50

  • SHA1

    840c3e04324f408acc54ef5ebea0c4ab3ebd161d

  • SHA256

    44b7f19132ddbad4f0b564c6cf0a32e9c18cbf95fad02ab69bcc440b8bb4c9a6

  • SHA512

    854d6a0e41723980dfd0255a5a5b1a6bd555c50fe7471651d00181f8bdbff656721eae772693398428999fb29a78c89b30e672d84612a9769d2f48af5e565b09

  • SSDEEP

    6144:bcm4FmowdHoSgWrXD486jCpoAhlq1mEjBqLyOSlhNFF23e:h4wFHoSgWj168w1VjsyvhNFF2u

Malware Config

Targets

    • Target

      44b7f19132ddbad4f0b564c6cf0a32e9c18cbf95fad02ab69bcc440b8bb4c9a6.exe

    • Size

      352KB

    • MD5

      1382b1da38a9b96dbf4de51472b03f50

    • SHA1

      840c3e04324f408acc54ef5ebea0c4ab3ebd161d

    • SHA256

      44b7f19132ddbad4f0b564c6cf0a32e9c18cbf95fad02ab69bcc440b8bb4c9a6

    • SHA512

      854d6a0e41723980dfd0255a5a5b1a6bd555c50fe7471651d00181f8bdbff656721eae772693398428999fb29a78c89b30e672d84612a9769d2f48af5e565b09

    • SSDEEP

      6144:bcm4FmowdHoSgWrXD486jCpoAhlq1mEjBqLyOSlhNFF23e:h4wFHoSgWj168w1VjsyvhNFF2u

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks