Overview

overview

10

Static

static

3

4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SourceDir2.zip

  • Size

    678KB

  • Sample

    240801-vnj2vszhjr

  • MD5

    0e4c839055d1e78c70cb037302cc52ad

  • SHA1

    6b52a81129d3facacb2fea5b0281cd7c1be14e7b

  • SHA256

    ae805b66e85b6d80bff92c0efe364116ec841d287e32520b8548883fe6fdcb86

  • SHA512

    72eaa4090eab0679b33cd93ca5d74fbac9dc6cf3d5084beab3980fc6e31a1d9700ae17013ce369736e0d3e062573d0138a74e485007fbf3c74622f27bb2a6d15

  • SSDEEP

    12288:jb9gryd0wf7pGuIez5WOrR6RZzQXVqMx7pe7sIc5UeLtl2ljh8PDQ9e:PSq0odG1OrRYky0+mtlaUDae

Score
10/10
blackmoonfatalratbankerdiscoveryinfostealerpersistencerattrojan

Malware Config

Targets

    • Target

      4.exe

    • Size

      111KB

    • MD5

      a9b40e0b76aa5a292cb6052c6c2fd81d

    • SHA1

      e15bba9e662ef45350720218617d563620c76823

    • SHA256

      f5017d72f3b829a55971f877ebaa257f5e9791ae253ae23111cc45628477c36c

    • SHA512

      ad49410a233614128a103ae55155665f563b67daa7411c42bf314a6a6d1c2cb61e4428d9049d0d3209d44a1b5eef1cab00541b6bb41dcf575ff9e7e406a2f23f

    • SSDEEP

      384:HQQA4mqWJ0P+ik1ND3Q69fl6+CQKnrw41MXDGl7xPxh8E9VF0NyrM1t:Q4mqWyPO193X9CQYrw2MXDGVxPxWENgt

    Score
    10/10
    blackmoonfatalratbankerdiscoveryinfostealerpersistencerattrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks