General

  • Target

    13a516437c002f849dd0cb23ee060e0793030d7fe27ffa27569c0f5c3843301e

  • Size

    234KB

  • Sample

    221127-yf4m3sde78

  • MD5

    4c8fa92b933519c30ab8db9e9fdca9fa

  • SHA1

    0155a5ddd0c14cf8bab2c5a48671460537aa1266

  • SHA256

    13a516437c002f849dd0cb23ee060e0793030d7fe27ffa27569c0f5c3843301e

  • SHA512

    e613abd5b1a106b63fde8f4e884029f189a2105ff4257fef691841454232e6f6f462a2ef2e0fa3182114c162cd37c5e981f3684fe5162d03885119ffe15bc5c9

  • SSDEEP

    6144:hTfzbt72rhsMFyRerNkUFt3rpAvtqOAPKB0oS4QnJ:hTfzbheqtqVt312qO8KB0oS

Malware Config

Targets

    • Target

      13a516437c002f849dd0cb23ee060e0793030d7fe27ffa27569c0f5c3843301e

    • Size

      234KB

    • MD5

      4c8fa92b933519c30ab8db9e9fdca9fa

    • SHA1

      0155a5ddd0c14cf8bab2c5a48671460537aa1266

    • SHA256

      13a516437c002f849dd0cb23ee060e0793030d7fe27ffa27569c0f5c3843301e

    • SHA512

      e613abd5b1a106b63fde8f4e884029f189a2105ff4257fef691841454232e6f6f462a2ef2e0fa3182114c162cd37c5e981f3684fe5162d03885119ffe15bc5c9

    • SSDEEP

      6144:hTfzbt72rhsMFyRerNkUFt3rpAvtqOAPKB0oS4QnJ:hTfzbheqtqVt312qO8KB0oS

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks