General

  • Target

    7a3c46e5254c70_JC.exe

  • Size

    6.4MB

  • Sample

    230716-vhak8sgg4t

  • MD5

    7a3c46e5254c70a363b1cac4bb6df99c

  • SHA1

    32ec44ad2d71afb1839de877cc294843fceb3496

  • SHA256

    9c6cfe60e81454adcd54eafdbfd78f810af26a5889762e1e517aed281be8d6d2

  • SHA512

    84073d66443946ac48bf3e86830820bf5aa661267a21889ad9ababf5710827c73cb95ecd7b4aebc33f34303641b4f4d594edf5c25048aeb8347b694289b122e5

  • SSDEEP

    98304:CTp+Ri4kmboPYYRnAccWv1lV3gEuaOO1xwTRmIVGxTpce/vxSHuFLOAkGkzdnEVG:Nkmbc3AgV376q/vxSHuFLOyomFHKnPv

Malware Config

Targets

    • Target

      7a3c46e5254c70_JC.exe

    • Size

      6.4MB

    • MD5

      7a3c46e5254c70a363b1cac4bb6df99c

    • SHA1

      32ec44ad2d71afb1839de877cc294843fceb3496

    • SHA256

      9c6cfe60e81454adcd54eafdbfd78f810af26a5889762e1e517aed281be8d6d2

    • SHA512

      84073d66443946ac48bf3e86830820bf5aa661267a21889ad9ababf5710827c73cb95ecd7b4aebc33f34303641b4f4d594edf5c25048aeb8347b694289b122e5

    • SSDEEP

      98304:CTp+Ri4kmboPYYRnAccWv1lV3gEuaOO1xwTRmIVGxTpce/vxSHuFLOAkGkzdnEVG:Nkmbc3AgV376q/vxSHuFLOyomFHKnPv

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks