General

  • Target

    134d2b87e5f2769e4bf0c7421fa9d3f0.bin

  • Size

    64KB

  • Sample

    231105-bl5q1abb23

  • MD5

    134d2b87e5f2769e4bf0c7421fa9d3f0

  • SHA1

    e2add2ab9d82301294334b783ea596489c224958

  • SHA256

    ed6f1231fa5b11a72c4f9fe4afb535375672e793aa3d142bfb7fad0917e1924f

  • SHA512

    a2d0bfdecb9f2e2649259f7aa1bfe5907cda323f85cabe11dff52d5918ef9e8d864696b954ec3cf15705900793a369ecb4e3391683f2b887d080bbbc0e30fe0a

  • SSDEEP

    1536:cvQBeOGtrYS3srx93UBWfwC6Ggnouy8vzVQQ/fF2OH2/:chOmTsF93UYfwC6GIout5px2/

Malware Config

Targets

    • Target

      134d2b87e5f2769e4bf0c7421fa9d3f0.bin

    • Size

      64KB

    • MD5

      134d2b87e5f2769e4bf0c7421fa9d3f0

    • SHA1

      e2add2ab9d82301294334b783ea596489c224958

    • SHA256

      ed6f1231fa5b11a72c4f9fe4afb535375672e793aa3d142bfb7fad0917e1924f

    • SHA512

      a2d0bfdecb9f2e2649259f7aa1bfe5907cda323f85cabe11dff52d5918ef9e8d864696b954ec3cf15705900793a369ecb4e3391683f2b887d080bbbc0e30fe0a

    • SSDEEP

      1536:cvQBeOGtrYS3srx93UBWfwC6Ggnouy8vzVQQ/fF2OH2/:chOmTsF93UYfwC6GIout5px2/

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks