General

  • Target

    65213e6f7e870dbcb2350993094d55e293f05ead0cb5fd9c3bb260cf0b4f1974.exe

  • Size

    464KB

  • Sample

    240523-a4z3ssfc31

  • MD5

    1fbc4496749b802b91945ba691dc7c30

  • SHA1

    b83d602a3e1d3fd818464c93fc33b572c01ebf0c

  • SHA256

    65213e6f7e870dbcb2350993094d55e293f05ead0cb5fd9c3bb260cf0b4f1974

  • SHA512

    06ed36aab0afed505c1cb1a5bf9255372dc82eb53630b9e008a4479eb1cb28d992de58bf0953bc1ac9671f5a994cb912daff65baadde33b809aa1902b8b775b6

  • SSDEEP

    12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1VK:VeR0oykayRFp3lztP+OKaf1VK

Malware Config

Targets

    • Target

      65213e6f7e870dbcb2350993094d55e293f05ead0cb5fd9c3bb260cf0b4f1974.exe

    • Size

      464KB

    • MD5

      1fbc4496749b802b91945ba691dc7c30

    • SHA1

      b83d602a3e1d3fd818464c93fc33b572c01ebf0c

    • SHA256

      65213e6f7e870dbcb2350993094d55e293f05ead0cb5fd9c3bb260cf0b4f1974

    • SHA512

      06ed36aab0afed505c1cb1a5bf9255372dc82eb53630b9e008a4479eb1cb28d992de58bf0953bc1ac9671f5a994cb912daff65baadde33b809aa1902b8b775b6

    • SSDEEP

      12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1VK:VeR0oykayRFp3lztP+OKaf1VK

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks