General

  • Target

    db82943973d634a2c2e50134225ca4a35df38c121905125b1056b7c6a2651959

  • Size

    885KB

  • Sample

    221106-rmffhaehh3

  • MD5

    0ed691426e3a2f0056dcc8a176127290

  • SHA1

    b8c0122df90d2831014775366bec2c342914eb3d

  • SHA256

    db82943973d634a2c2e50134225ca4a35df38c121905125b1056b7c6a2651959

  • SHA512

    9fd42cffc179ccdc6c7519bec5cfe4d2a6d66ef10b6dda4292959af2b16b05c2a2d253e654cd96dd9ae9cb783297353f59b64dcaf822418ca2d0506f7e0d7ec7

  • SSDEEP

    12288:UVq4SJIMDR8RUZ8eTjiOTqZES57PLwiFGS1NmhRxGm7uj77JtOMZoS:UVq4SGMDR8RUXTjrkESZDwiFGSuyXnO

Malware Config

Targets

    • Target

      db82943973d634a2c2e50134225ca4a35df38c121905125b1056b7c6a2651959

    • Size

      885KB

    • MD5

      0ed691426e3a2f0056dcc8a176127290

    • SHA1

      b8c0122df90d2831014775366bec2c342914eb3d

    • SHA256

      db82943973d634a2c2e50134225ca4a35df38c121905125b1056b7c6a2651959

    • SHA512

      9fd42cffc179ccdc6c7519bec5cfe4d2a6d66ef10b6dda4292959af2b16b05c2a2d253e654cd96dd9ae9cb783297353f59b64dcaf822418ca2d0506f7e0d7ec7

    • SSDEEP

      12288:UVq4SJIMDR8RUZ8eTjiOTqZES57PLwiFGS1NmhRxGm7uj77JtOMZoS:UVq4SGMDR8RUXTjrkESZDwiFGSuyXnO

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks