General

  • Target

    0095965090cb133ea143390bb86c4061c7c0be2101bd22c397d63caf68543d6b

  • Size

    462KB

  • Sample

    240921-z5dcvsthke

  • MD5

    6f7b44c648232645614c34920e17d396

  • SHA1

    64e74ad6aec41ee6acb2346b5e443fa11c5dd050

  • SHA256

    0095965090cb133ea143390bb86c4061c7c0be2101bd22c397d63caf68543d6b

  • SHA512

    2b3b3d2357317c8005e54e62a9ff4cfe245eb419ae8fd8e4a0af3b16a16023ed3f5d2b6af239ba7e2d4d991e4945f5d532471e503bbc9af4018697726c845b2e

  • SSDEEP

    6144:aRjqhgaAis0/28m2zDjnFQUfmnYYSny4SHSnHByE3QMYFZn:AjqhVxVO8VjTfrYFZn

Malware Config

Targets

    • Target

      0095965090cb133ea143390bb86c4061c7c0be2101bd22c397d63caf68543d6b

    • Size

      462KB

    • MD5

      6f7b44c648232645614c34920e17d396

    • SHA1

      64e74ad6aec41ee6acb2346b5e443fa11c5dd050

    • SHA256

      0095965090cb133ea143390bb86c4061c7c0be2101bd22c397d63caf68543d6b

    • SHA512

      2b3b3d2357317c8005e54e62a9ff4cfe245eb419ae8fd8e4a0af3b16a16023ed3f5d2b6af239ba7e2d4d991e4945f5d532471e503bbc9af4018697726c845b2e

    • SSDEEP

      6144:aRjqhgaAis0/28m2zDjnFQUfmnYYSny4SHSnHByE3QMYFZn:AjqhVxVO8VjTfrYFZn

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

    • Fatal Rat payload

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v15

Tasks