Overview

overview

10

Static

static

7

37f0ee019f...77.exe

windows7-x64

10

37f0ee019f...77.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37f0ee019fbe0517cfb0de1b592d660ecbf2537bf6e2bd59fe67f7e276700b77

  • Size

    106KB

  • Sample

    241017-ekl42svcqm

  • MD5

    10735be79033ec2644e55001b5eda019

  • SHA1

    a5e412fb6f2f2e06025a8a5d6b6161c3b6835d19

  • SHA256

    37f0ee019fbe0517cfb0de1b592d660ecbf2537bf6e2bd59fe67f7e276700b77

  • SHA512

    8052fd744c8fdbe58b6591ad9d60bdf24017136dbe35b0440314446b77021494825bfe9be3962ff0832d66779f2f69902f10e823ff6be25bc52c6be6726a799a

  • SSDEEP

    1536:GNmIqV+fI1663A6HPcrmbW1nLSW9hHiUouawWSCzARHRA7G1/qUjEpbWCE0UWOO+:wqgC64HPc+WoWHHiUHawJRx00+RoJ3

Score
10/10
blackmoonfatalrataspackv2bankerdiscoveryinfostealerrattrojanvmprotect

Malware Config

Targets

    • Target

      37f0ee019fbe0517cfb0de1b592d660ecbf2537bf6e2bd59fe67f7e276700b77

    • Size

      106KB

    • MD5

      10735be79033ec2644e55001b5eda019

    • SHA1

      a5e412fb6f2f2e06025a8a5d6b6161c3b6835d19

    • SHA256

      37f0ee019fbe0517cfb0de1b592d660ecbf2537bf6e2bd59fe67f7e276700b77

    • SHA512

      8052fd744c8fdbe58b6591ad9d60bdf24017136dbe35b0440314446b77021494825bfe9be3962ff0832d66779f2f69902f10e823ff6be25bc52c6be6726a799a

    • SSDEEP

      1536:GNmIqV+fI1663A6HPcrmbW1nLSW9hHiUouawWSCzARHRA7G1/qUjEpbWCE0UWOO+:wqgC64HPc+WoWHHiUHawJRx00+RoJ3

    Score
    10/10
    blackmoonfatalratbankerdiscoveryinfostealerrattrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks