General
- Target 50ae7839463137f7fab104e21cda58572dbcf4fbd28c61038187752e2fed9512
- Size 430KB
- Sample241230-tb34jaypbk
- SHA256 50ae7839463137f7fab104e21cda58572dbcf4fbd28c61038187752e2fed9512
Score
10/10
Malware Config
Targets
-
- Target 50ae7839463137f7fab104e21cda58572dbcf4fbd28c61038187752e2fed9512
- Size 430KB
- SHA256 50ae7839463137f7fab104e21cda58572dbcf4fbd28c61038187752e2fed9512
Score10/10Blackmoon family
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
Detect Blackmoon payload
Detect PurpleFox Rootkit
Detect PurpleFox Rootkit.
Gh0st RAT payload
Gh0strat
Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
Gh0strat family
PurpleFox
PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.
Purplefox family
Executes dropped EXE
Suspicious use of SetThreadContext
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.