General

  • Target

    c222c908bcca33b1043dac24ae9b6cf10baab0beebdf276d65869c9482c2d5ac

  • Size

    448KB

  • Sample

    230401-xs95ysdd2w

  • MD5

    b9ddb42df2ab7cd53941ddb805782849

  • SHA1

    4785568ebb54481123a6248673a5c8ece9ec1996

  • SHA256

    c222c908bcca33b1043dac24ae9b6cf10baab0beebdf276d65869c9482c2d5ac

  • SHA512

    3f0623a8783ea21fa975bfcadf92779c9c8b14e324dcb9337bad26e4d0efe2681e8c6fda07df9327a7dc68c0c964d9ad9788393a4b71294dee27edafc645a520

  • SSDEEP

    12288:9r56gvt7/aualERHT4LfWKpR+HKL0dzrn40arYzh6B:9rYgvtzauaw4yPdz/arYzhe

Malware Config

Targets

    • Target

      c222c908bcca33b1043dac24ae9b6cf10baab0beebdf276d65869c9482c2d5ac

    • Size

      448KB

    • MD5

      b9ddb42df2ab7cd53941ddb805782849

    • SHA1

      4785568ebb54481123a6248673a5c8ece9ec1996

    • SHA256

      c222c908bcca33b1043dac24ae9b6cf10baab0beebdf276d65869c9482c2d5ac

    • SHA512

      3f0623a8783ea21fa975bfcadf92779c9c8b14e324dcb9337bad26e4d0efe2681e8c6fda07df9327a7dc68c0c964d9ad9788393a4b71294dee27edafc645a520

    • SSDEEP

      12288:9r56gvt7/aualERHT4LfWKpR+HKL0dzrn40arYzh6B:9rYgvtzauaw4yPdz/arYzhe

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks