Overview

overview

10

Static

static

10

a99dbfd6db...7d.exe

windows7-x64

10

a99dbfd6db...7d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a99dbfd6db307f101e8a4232234346e165bf41b04b9832332b96d996eacc387d

  • Size

    615KB

  • Sample

    240926-knw2ba1aqa

  • MD5

    31693454b6820edb668a755ec9fe1334

  • SHA1

    2f9f90f2613a30f4c4ff3393a0e3755a4606640b

  • SHA256

    a99dbfd6db307f101e8a4232234346e165bf41b04b9832332b96d996eacc387d

  • SHA512

    858026654540ba117275ae9b8d24b87364e29ae8c8a195c0f522b64e4967dd877f5da921e9a719b3b8d63450b44172c4570faf905bbdd2beaef98bebcd1d438f

  • SSDEEP

    6144:vKit3F+vmZRvDckv87p7XoPnIovnFQUfmnYYSny4SHSnHByE3QMYFZnfh:vKit3wOXrcgfTfrYFZnf

Score
10/10
blackmoonfatalratbankerdiscoveryinfostealerrattrojanvmprotect

Malware Config

Targets

    • Target

      a99dbfd6db307f101e8a4232234346e165bf41b04b9832332b96d996eacc387d

    • Size

      615KB

    • MD5

      31693454b6820edb668a755ec9fe1334

    • SHA1

      2f9f90f2613a30f4c4ff3393a0e3755a4606640b

    • SHA256

      a99dbfd6db307f101e8a4232234346e165bf41b04b9832332b96d996eacc387d

    • SHA512

      858026654540ba117275ae9b8d24b87364e29ae8c8a195c0f522b64e4967dd877f5da921e9a719b3b8d63450b44172c4570faf905bbdd2beaef98bebcd1d438f

    • SSDEEP

      6144:vKit3F+vmZRvDckv87p7XoPnIovnFQUfmnYYSny4SHSnHByE3QMYFZnfh:vKit3wOXrcgfTfrYFZnf

    Score
    10/10
    blackmoonfatalratbankerdiscoveryinfostealerrattrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks