General

  • Target

    f66b634e00771e90f4979fa8dd5b8baf228b8c034fd50a6d6bdb15021b66cb71

  • Size

    58KB

  • Sample

    221018-csv1taeah9

  • MD5

    cd800fc03b067dd724dd8922d684d03d

  • SHA1

    465c5bc57ac47ef4a942a0b459f7b6d02e216e77

  • SHA256

    f66b634e00771e90f4979fa8dd5b8baf228b8c034fd50a6d6bdb15021b66cb71

  • SHA512

    27955570a51ef50b9b0a5958fa7881aead03866f9442a459ccf3734eda0526a3d3ba68eb636dcafb037d5892f2d164046fbef6750bc9ddabd08ce1727593bbc5

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIww06WqqVUV:ymb3NkkiQ3mdBjFIw0yy

Malware Config

Targets

    • Target

      f66b634e00771e90f4979fa8dd5b8baf228b8c034fd50a6d6bdb15021b66cb71

    • Size

      58KB

    • MD5

      cd800fc03b067dd724dd8922d684d03d

    • SHA1

      465c5bc57ac47ef4a942a0b459f7b6d02e216e77

    • SHA256

      f66b634e00771e90f4979fa8dd5b8baf228b8c034fd50a6d6bdb15021b66cb71

    • SHA512

      27955570a51ef50b9b0a5958fa7881aead03866f9442a459ccf3734eda0526a3d3ba68eb636dcafb037d5892f2d164046fbef6750bc9ddabd08ce1727593bbc5

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIww06WqqVUV:ymb3NkkiQ3mdBjFIw0yy

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks