General

  • Target

    e4c0a891a88182123c3b21f7c581c0e68ad47af05ff716c6b27342703eee66a5

  • Size

    448KB

  • Sample

    230414-xqrktscg8v

  • MD5

    1968cc6ca6b0a205f6ac648e1f96d02d

  • SHA1

    e98cf8cb966199ac542306fdd7364700c80b6afa

  • SHA256

    e4c0a891a88182123c3b21f7c581c0e68ad47af05ff716c6b27342703eee66a5

  • SHA512

    1369dd9fc0e096d7ff91a63871d1ffe243d7d46d5e93558fd28e9ca9b2a1c0bc0ddb8fc40ca70af4c5503fa9a73a148cba6e520662e3a5013279dfc46ca8508b

  • SSDEEP

    12288:9r56gvt7/aualERHT4LfWKpR+HKL0dzrn40arYzh6m:9rYgvtzauaw4yPdz/arYzhB

Malware Config

Targets

    • Target

      e4c0a891a88182123c3b21f7c581c0e68ad47af05ff716c6b27342703eee66a5

    • Size

      448KB

    • MD5

      1968cc6ca6b0a205f6ac648e1f96d02d

    • SHA1

      e98cf8cb966199ac542306fdd7364700c80b6afa

    • SHA256

      e4c0a891a88182123c3b21f7c581c0e68ad47af05ff716c6b27342703eee66a5

    • SHA512

      1369dd9fc0e096d7ff91a63871d1ffe243d7d46d5e93558fd28e9ca9b2a1c0bc0ddb8fc40ca70af4c5503fa9a73a148cba6e520662e3a5013279dfc46ca8508b

    • SSDEEP

      12288:9r56gvt7/aualERHT4LfWKpR+HKL0dzrn40arYzh6m:9rYgvtzauaw4yPdz/arYzhB

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks