Overview

overview

10

Static

static

7

66bde9323a...da.exe

windows7-x64

10

66bde9323a...da.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    66bde9323a3a0cde332d44d028851b5d8e142028577b99dfb6e72bf54f59f1da

  • Size

    462KB

  • Sample

    240920-wxdrwazfqd

  • MD5

    dad4ebcc69cdf2d83e9814f6638bb51c

  • SHA1

    63b7eee82aaa60e0adf700c705aae339405c6042

  • SHA256

    66bde9323a3a0cde332d44d028851b5d8e142028577b99dfb6e72bf54f59f1da

  • SHA512

    40d2457c2b4f708a25f0c7bf12cf41ac3aee0b1536ae7872197ec5995deac2b7d1f26bcd9ba530cee371398cba23e52b0aa383067370ed0614b522a90da66cc9

  • SSDEEP

    6144:wRjJhgaAis0/28moPv6nFQUfmnYYSny4SHSnHByE3QMYFZn:WjJhVxVO8dH6TfrYFZn

Score
10/10
blackmoonfatalrataspackv2bankerdiscoveryinfostealerrattrojanvmprotect

Malware Config

Targets

    • Target

      66bde9323a3a0cde332d44d028851b5d8e142028577b99dfb6e72bf54f59f1da

    • Size

      462KB

    • MD5

      dad4ebcc69cdf2d83e9814f6638bb51c

    • SHA1

      63b7eee82aaa60e0adf700c705aae339405c6042

    • SHA256

      66bde9323a3a0cde332d44d028851b5d8e142028577b99dfb6e72bf54f59f1da

    • SHA512

      40d2457c2b4f708a25f0c7bf12cf41ac3aee0b1536ae7872197ec5995deac2b7d1f26bcd9ba530cee371398cba23e52b0aa383067370ed0614b522a90da66cc9

    • SSDEEP

      6144:wRjJhgaAis0/28moPv6nFQUfmnYYSny4SHSnHByE3QMYFZn:WjJhVxVO8dH6TfrYFZn

    Score
    10/10
    blackmoonfatalratbankerdiscoveryinfostealerrattrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks