General

  • Target

    f23000e53b237ba433c3c541fa5dedf0_exe32.exe

  • Size

    85KB

  • Sample

    231015-ykc1xsaf53

  • MD5

    f23000e53b237ba433c3c541fa5dedf0

  • SHA1

    63be5d8e7caf67a9be54a9fa6aa2079f7d30b378

  • SHA256

    652af00e1978e3c3051f84ebc9cadd89c4982c923b32d0d9fdddf48a318031e2

  • SHA512

    58c0ac4bccf12f19fec5aa3dd3905cdd3ac793452b40d38f9981b0fc1953e234865e6e420d664df10dc345e439265ff5185debbe085e05e6dd12f660e1f736eb

  • SSDEEP

    1536:CvQBeOGtrYS3srx93UBWfwC6Ggnouy8Aeo/M3oLIpjp:ChOmTsF93UYfwC6GIoutAeoGGE

Malware Config

Targets

    • Target

      f23000e53b237ba433c3c541fa5dedf0_exe32.exe

    • Size

      85KB

    • MD5

      f23000e53b237ba433c3c541fa5dedf0

    • SHA1

      63be5d8e7caf67a9be54a9fa6aa2079f7d30b378

    • SHA256

      652af00e1978e3c3051f84ebc9cadd89c4982c923b32d0d9fdddf48a318031e2

    • SHA512

      58c0ac4bccf12f19fec5aa3dd3905cdd3ac793452b40d38f9981b0fc1953e234865e6e420d664df10dc345e439265ff5185debbe085e05e6dd12f660e1f736eb

    • SSDEEP

      1536:CvQBeOGtrYS3srx93UBWfwC6Ggnouy8Aeo/M3oLIpjp:ChOmTsF93UYfwC6GIoutAeoGGE

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks