General

  • Target

    f901186fd42741422a40e1c93684b300_exe32.exe

  • Size

    247KB

  • Sample

    231015-ykqa9aah73

  • MD5

    f901186fd42741422a40e1c93684b300

  • SHA1

    a5465d47d03ea9fd7b8498a52063ed01c2ec691d

  • SHA256

    2b0534afcaf295ca4c6b6664b8f5322d84fa7bb604e38b8eda711149de47c26b

  • SHA512

    167f526de9051a06a2def52ac8fb7ade9a678004b2297ebf643df8b5cf8f0d1d082ea300c54e02f55c4e3d88f5c700bbb445401e41da2c081c81ad155eaea0ea

  • SSDEEP

    6144:n3C9BRo7tvnJ9oEz2Eu9XgcVyDOoZU0wGXAHV:n3C9ytvnV2NQAo20wGXwV

Malware Config

Targets

    • Target

      f901186fd42741422a40e1c93684b300_exe32.exe

    • Size

      247KB

    • MD5

      f901186fd42741422a40e1c93684b300

    • SHA1

      a5465d47d03ea9fd7b8498a52063ed01c2ec691d

    • SHA256

      2b0534afcaf295ca4c6b6664b8f5322d84fa7bb604e38b8eda711149de47c26b

    • SHA512

      167f526de9051a06a2def52ac8fb7ade9a678004b2297ebf643df8b5cf8f0d1d082ea300c54e02f55c4e3d88f5c700bbb445401e41da2c081c81ad155eaea0ea

    • SSDEEP

      6144:n3C9BRo7tvnJ9oEz2Eu9XgcVyDOoZU0wGXAHV:n3C9ytvnV2NQAo20wGXwV

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks