General

  • Target

    93b5bc908b2e18d7176ba2090ed2ac190ff853de08c5b37bb55e55b9fa43905c

  • Size

    863KB

  • Sample

    230827-3rpqhsfg3w

  • MD5

    9e7929a9d0c06b563ebfdaae9b85a42b

  • SHA1

    db1c04f5feab8a94dacf460d09358c949928c76f

  • SHA256

    93b5bc908b2e18d7176ba2090ed2ac190ff853de08c5b37bb55e55b9fa43905c

  • SHA512

    7ef0e3f101cb01847c8e5154815b3d3f18c2dea17ff5b7f25b294c8b776c646d3a2d02b41733c6dd8a5c91173ab90002467dcb6c68c02750c0d1842ab19f71d8

  • SSDEEP

    24576:Bo/Ut+yo31LrQCC40VNA28Gu2LMId7xPcQDCXPOIsxhN:Buhyo313Qd4F+ueZc6CXPOrxhN

Malware Config

Targets

    • Target

      93b5bc908b2e18d7176ba2090ed2ac190ff853de08c5b37bb55e55b9fa43905c

    • Size

      863KB

    • MD5

      9e7929a9d0c06b563ebfdaae9b85a42b

    • SHA1

      db1c04f5feab8a94dacf460d09358c949928c76f

    • SHA256

      93b5bc908b2e18d7176ba2090ed2ac190ff853de08c5b37bb55e55b9fa43905c

    • SHA512

      7ef0e3f101cb01847c8e5154815b3d3f18c2dea17ff5b7f25b294c8b776c646d3a2d02b41733c6dd8a5c91173ab90002467dcb6c68c02750c0d1842ab19f71d8

    • SSDEEP

      24576:Bo/Ut+yo31LrQCC40VNA28Gu2LMId7xPcQDCXPOIsxhN:Buhyo313Qd4F+ueZc6CXPOrxhN

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks