General

  • Target

    3b35262312b6cb645ee2aceadf1834e0_JC.exe

  • Size

    82KB

  • Sample

    231012-2a56hafc72

  • MD5

    3b35262312b6cb645ee2aceadf1834e0

  • SHA1

    7174e0a7da7ff64bbd97729daada61cf40008689

  • SHA256

    9aa87d39fe7cb770699a9c5e214d15839f48e4b86ba15267ebb67276c5ad2e67

  • SHA512

    a3340bcb60f135432915926314c1d1611b52ede61645be457bfd19eb705860d113eee04585481c5e05c58152aa450b7ca6b99de3e5f8e4cd6e5941b6f903ba17

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoLU1g1t/lBnzI:ymb3NkkiQ3mdBjFoLkGt/lBE

Malware Config

Targets

    • Target

      3b35262312b6cb645ee2aceadf1834e0_JC.exe

    • Size

      82KB

    • MD5

      3b35262312b6cb645ee2aceadf1834e0

    • SHA1

      7174e0a7da7ff64bbd97729daada61cf40008689

    • SHA256

      9aa87d39fe7cb770699a9c5e214d15839f48e4b86ba15267ebb67276c5ad2e67

    • SHA512

      a3340bcb60f135432915926314c1d1611b52ede61645be457bfd19eb705860d113eee04585481c5e05c58152aa450b7ca6b99de3e5f8e4cd6e5941b6f903ba17

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoLU1g1t/lBnzI:ymb3NkkiQ3mdBjFoLkGt/lBE

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks