General

  • Target

    bd4165b4c2a660c44d1da67be7f0afd0_exe32.exe

  • Size

    52KB

  • Sample

    231015-yfy3lagb72

  • MD5

    bd4165b4c2a660c44d1da67be7f0afd0

  • SHA1

    38bbf2e128256e9ee86fa1b94bdfa4df2ed234a3

  • SHA256

    03ab9522cd2c5741aba7d81209ab743429790d2fbca4fe6de34563656558d706

  • SHA512

    d5b327304267c948923a92d3ae7f5111ab8b3bf9ad6029d960538fdf89090936a7f86b1485ed9d3b1723442a370a9b031e0dbf9ceac3b695ee5b4c02af9f1395

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI58Ck:ymb3NkkiQ3mdBjFI3k

Malware Config

Targets

    • Target

      bd4165b4c2a660c44d1da67be7f0afd0_exe32.exe

    • Size

      52KB

    • MD5

      bd4165b4c2a660c44d1da67be7f0afd0

    • SHA1

      38bbf2e128256e9ee86fa1b94bdfa4df2ed234a3

    • SHA256

      03ab9522cd2c5741aba7d81209ab743429790d2fbca4fe6de34563656558d706

    • SHA512

      d5b327304267c948923a92d3ae7f5111ab8b3bf9ad6029d960538fdf89090936a7f86b1485ed9d3b1723442a370a9b031e0dbf9ceac3b695ee5b4c02af9f1395

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI58Ck:ymb3NkkiQ3mdBjFI3k

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks