General

  • Target

    keyiso.bin.zip

  • Size

    15KB

  • Sample

    230323-chk3vseg9x

  • MD5

    d6a117a31846227af8819d7e9601127c

  • SHA1

    c9c0a790bc19087b98b4afd7c7a3866a426bca16

  • SHA256

    5289d89b6b479f9b46ebf6080d21300b0ea8fa767046e0dfd68183e6a6145e91

  • SHA512

    8438e6cc930f3fc26bbcc5d7278b378cfd3a24d09fd0437c7b71e828596a14c54999be99944e0e82958c72a82bc302d689a307f5bc29a7e2a5cf20ff7c001796

  • SSDEEP

    384:NZfjpnf5PfmatpREmQ7ZVWnYAsxifDs6V3bZL1Ek:N5jpnf5PfvpRkeI6Vd1Ek

Malware Config

Targets

    • Target

      keyiso.bin

    • Size

      17KB

    • MD5

      d0d44ca70e15a780c1873d0807709d7c

    • SHA1

      c67d3af5c48dd877883af6cc9afd30031f99b069

    • SHA256

      c7eedd9c1bb9a4a99b6caf37a5b6e061de48cc98a180808782a40957a0a576ed

    • SHA512

      637402aaa4ff4e8e16785dbcb7ff622af77cd84b9c2588645bf6faef3dbc0578a83d7e4f32028fa64db3a3673a51b8979890dd39cd2ad6ed40f3033d364e55b2

    • SSDEEP

      384:1BSgeNZZWY5YyaImzDvPhHAarm6Abo4bPg096f1esWlTW:1jjGYQmXvpHpm6AkMPE1E

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks