Overview

overview

10

Static

static

7

2ab428361a...46.exe

windows7-x64

10

2ab428361a...46.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ab428361a0fdcbc95e2d37f2ee07789c376277bbf1cf1b6e2b4677aca1cd546

  • Size

    122KB

  • Sample

    241007-r8dtsszajp

  • MD5

    6ea315db6c4bab6f7ae4abbc6d5237bc

  • SHA1

    982d333dc4b07b90180f8f291af7571e6189171b

  • SHA256

    2ab428361a0fdcbc95e2d37f2ee07789c376277bbf1cf1b6e2b4677aca1cd546

  • SHA512

    994467c2fc65473e8d00a4c7b97103318b57cf39fdf0beba8286cc710fe4e6913f93ee7ae8b76c6bd30fa30e94f70e0a37f3f99be3fe3e893f713e8263af86cd

  • SSDEEP

    1536:2UdrF74j50KUn+uZMNqR7lrsHDC5kWoS:BF7490V+uSNWlIHDCu

Score
10/10
blackmoonfatalrataspackv2bankerdiscoveryinfostealerrattrojanvmprotect

Malware Config

Targets

    • Target

      2ab428361a0fdcbc95e2d37f2ee07789c376277bbf1cf1b6e2b4677aca1cd546

    • Size

      122KB

    • MD5

      6ea315db6c4bab6f7ae4abbc6d5237bc

    • SHA1

      982d333dc4b07b90180f8f291af7571e6189171b

    • SHA256

      2ab428361a0fdcbc95e2d37f2ee07789c376277bbf1cf1b6e2b4677aca1cd546

    • SHA512

      994467c2fc65473e8d00a4c7b97103318b57cf39fdf0beba8286cc710fe4e6913f93ee7ae8b76c6bd30fa30e94f70e0a37f3f99be3fe3e893f713e8263af86cd

    • SSDEEP

      1536:2UdrF74j50KUn+uZMNqR7lrsHDC5kWoS:BF7490V+uSNWlIHDCu

    Score
    10/10
    blackmoonfatalratbankerdiscoveryinfostealerrattrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks