Overview

overview

10

Static

static

7

ea6b15a15e...d5.exe

windows7-x64

10

ea6b15a15e...d5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea6b15a15ed32d3965b45552a7e87fd5bdb0a4e21d26063f47102c0fb209e3d5

  • Size

    135KB

  • Sample

    250102-l9lyxaxlcx

  • MD5

    df8b866a627276896b882e843caedbfa

  • SHA1

    19e752365adeb77e37e5288b8a95a92f41d6ded2

  • SHA256

    ea6b15a15ed32d3965b45552a7e87fd5bdb0a4e21d26063f47102c0fb209e3d5

  • SHA512

    a8a831d6082a6194721c88ed81e4d39458a035ee39366d5a79438a3e2eb3662919c7d20cb82195479d0cab259ae65214ac60805fc6d11e767f45b532d46db9e1

  • SSDEEP

    3072:1lRG2oPJF4uJgJqcM8420jeAA3IY3atZWN0:1lEWuOJqc22y4B3H

Score
10/10
blackmoonfatalrataspackv2bankerdiscoveryinfostealerrattrojanvmprotect

Malware Config

Targets

    • Target

      ea6b15a15ed32d3965b45552a7e87fd5bdb0a4e21d26063f47102c0fb209e3d5

    • Size

      135KB

    • MD5

      df8b866a627276896b882e843caedbfa

    • SHA1

      19e752365adeb77e37e5288b8a95a92f41d6ded2

    • SHA256

      ea6b15a15ed32d3965b45552a7e87fd5bdb0a4e21d26063f47102c0fb209e3d5

    • SHA512

      a8a831d6082a6194721c88ed81e4d39458a035ee39366d5a79438a3e2eb3662919c7d20cb82195479d0cab259ae65214ac60805fc6d11e767f45b532d46db9e1

    • SSDEEP

      3072:1lRG2oPJF4uJgJqcM8420jeAA3IY3atZWN0:1lEWuOJqc22y4B3H

    Score
    10/10
    blackmoonfatalratbankerdiscoveryinfostealerrattrojanvmprotect

    • Blackmoon family

      blackmoon

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatalrat family

      fatalrat

    • Fatal Rat payload

      ratinfostealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks