General

  • Target

    d5ecb0e3131190170e71705fe1bd33279e2a5999b56493b94440fd744d9b88e5

  • Size

    91KB

  • Sample

    241003-1dtffa1emc

  • MD5

    0a73d562a541cfcf92ab1cf89c0c237b

  • SHA1

    8384e2fdb7fedbad7a45db778593804a5d3b57c8

  • SHA256

    d5ecb0e3131190170e71705fe1bd33279e2a5999b56493b94440fd744d9b88e5

  • SHA512

    a8360fe27c898411c19e9e6474270b5cbf2496208a8106bc75c94be92a3748ca272aac2f9a60bc45c4f1b8f280120509f5437156941af81a8384c9f421c083e3

  • SSDEEP

    1536:O3zn5sUazbxW7VFqyswPlWnZI3Jj+0FG1yKwFchxL+Wj5HnQ:Ojn5CuVFjbInZI5j96yKwS3O

Malware Config

Targets

    • Target

      d5ecb0e3131190170e71705fe1bd33279e2a5999b56493b94440fd744d9b88e5

    • Size

      91KB

    • MD5

      0a73d562a541cfcf92ab1cf89c0c237b

    • SHA1

      8384e2fdb7fedbad7a45db778593804a5d3b57c8

    • SHA256

      d5ecb0e3131190170e71705fe1bd33279e2a5999b56493b94440fd744d9b88e5

    • SHA512

      a8360fe27c898411c19e9e6474270b5cbf2496208a8106bc75c94be92a3748ca272aac2f9a60bc45c4f1b8f280120509f5437156941af81a8384c9f421c083e3

    • SSDEEP

      1536:O3zn5sUazbxW7VFqyswPlWnZI3Jj+0FG1yKwFchxL+Wj5HnQ:Ojn5CuVFjbInZI5j96yKwS3O

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

    • Fatal Rat payload

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v15

Tasks