General

  • Target

    5ed6f9cdd4c61ef6f2c3971c040f14717ba3e8395e895b357aec8f619daecb2a.exe

  • Size

    464KB

  • Sample

    240530-byvrkaaf59

  • MD5

    4abad217ba944709664a564424c05064

  • SHA1

    f6dad60e313aad36fcdb0e2a920968f1392aa050

  • SHA256

    5ed6f9cdd4c61ef6f2c3971c040f14717ba3e8395e895b357aec8f619daecb2a

  • SHA512

    9a972a5e59f4e2e87708f53640b9b18f215e9138a61fa895a1112102b7c7f227be98975347050d33b5e33b4ced12d133006dd34187bb33b6a283d2c3ca4af946

  • SSDEEP

    12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1Vs:VeR0oykayRFp3lztP+OKaf1Vs

Malware Config

Targets

    • Target

      5ed6f9cdd4c61ef6f2c3971c040f14717ba3e8395e895b357aec8f619daecb2a.exe

    • Size

      464KB

    • MD5

      4abad217ba944709664a564424c05064

    • SHA1

      f6dad60e313aad36fcdb0e2a920968f1392aa050

    • SHA256

      5ed6f9cdd4c61ef6f2c3971c040f14717ba3e8395e895b357aec8f619daecb2a

    • SHA512

      9a972a5e59f4e2e87708f53640b9b18f215e9138a61fa895a1112102b7c7f227be98975347050d33b5e33b4ced12d133006dd34187bb33b6a283d2c3ca4af946

    • SSDEEP

      12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1Vs:VeR0oykayRFp3lztP+OKaf1Vs

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks