Overview

overview

10

Static

static

7

4ea517b4ee...ff.exe

windows7-x64

10

4ea517b4ee...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ea517b4ee9a9c22135fa577a557a02efe8f7c11caa3de06aa052a939c39d6ff

  • Size

    72KB

  • Sample

    241011-yvxs3swbrl

  • MD5

    8559027374825b9849d24261d39783e1

  • SHA1

    0ae6f7a3e2147e1244d90e493870aaf43795101c

  • SHA256

    4ea517b4ee9a9c22135fa577a557a02efe8f7c11caa3de06aa052a939c39d6ff

  • SHA512

    c13e9e5099d1f8c0040858cc786ef2abc0d0110d33ead4391789fac32d7524ddeeab38235d201390e34b09b54c1d0fb42925996ffac621d653993f4a69b01945

  • SSDEEP

    1536:BUdrF74YFUEnp04k4yJ1uuwpu6awoWqmfu7WoS:0F74YWEp0wyK5Nh0YE

Score
10/10
blackmoonfatalrataspackv2bankerdiscoveryinfostealerrattrojanvmprotect

Malware Config

Targets

    • Target

      4ea517b4ee9a9c22135fa577a557a02efe8f7c11caa3de06aa052a939c39d6ff

    • Size

      72KB

    • MD5

      8559027374825b9849d24261d39783e1

    • SHA1

      0ae6f7a3e2147e1244d90e493870aaf43795101c

    • SHA256

      4ea517b4ee9a9c22135fa577a557a02efe8f7c11caa3de06aa052a939c39d6ff

    • SHA512

      c13e9e5099d1f8c0040858cc786ef2abc0d0110d33ead4391789fac32d7524ddeeab38235d201390e34b09b54c1d0fb42925996ffac621d653993f4a69b01945

    • SSDEEP

      1536:BUdrF74YFUEnp04k4yJ1uuwpu6awoWqmfu7WoS:0F74YWEp0wyK5Nh0YE

    Score
    10/10
    blackmoonfatalratbankerdiscoveryinfostealerrattrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks