General

  • Target

    05f9674f369397c9c67a8541407296c86c0aed2a26d2733fa3ffe9a256ad37db

  • Size

    484KB

  • Sample

    231011-sgw2qsgf33

  • MD5

    265f9744bc871ecbac1f576b53fc4b70

  • SHA1

    2e28afaff34a36af22c4081473ddd67e22da2b22

  • SHA256

    05f9674f369397c9c67a8541407296c86c0aed2a26d2733fa3ffe9a256ad37db

  • SHA512

    4242273ac84ceaa19dba0e98868739d04dd0a3c29c43007d8ad3bcd72173536e9544685097b1bb619d52ffb9707b8189f9991122931c62efdc8074e2499bfab8

  • SSDEEP

    12288:m667NO5rh27dVAxZfIjpXxgBLeE8tRc5kDUkLLwbpcRGI:mB7E5VcQZf82hezc5ZkLLwbmb

Malware Config

Targets

    • Target

      05f9674f369397c9c67a8541407296c86c0aed2a26d2733fa3ffe9a256ad37db

    • Size

      484KB

    • MD5

      265f9744bc871ecbac1f576b53fc4b70

    • SHA1

      2e28afaff34a36af22c4081473ddd67e22da2b22

    • SHA256

      05f9674f369397c9c67a8541407296c86c0aed2a26d2733fa3ffe9a256ad37db

    • SHA512

      4242273ac84ceaa19dba0e98868739d04dd0a3c29c43007d8ad3bcd72173536e9544685097b1bb619d52ffb9707b8189f9991122931c62efdc8074e2499bfab8

    • SSDEEP

      12288:m667NO5rh27dVAxZfIjpXxgBLeE8tRc5kDUkLLwbpcRGI:mB7E5VcQZf82hezc5ZkLLwbmb

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks