General

  • Target

    017e0419fcb849cab6c7311d7b71f671570b71e1239f78fa3201eea819233876

  • Size

    15.8MB

  • Sample

    231116-m67a4scc41

  • MD5

    8b93e40cdda9545f47c93bb0d3b44541

  • SHA1

    9bf3a52a30a783062cedfa420c55be04f048eb18

  • SHA256

    017e0419fcb849cab6c7311d7b71f671570b71e1239f78fa3201eea819233876

  • SHA512

    14119f9ab7f5cff36613759db9441d6626461753859035f239c7ccd214a6a093c039a8253954558a7484325dca7b35a8f8e8d66293fe7a1dd1678fc2206a9a1a

  • SSDEEP

    393216:sCdpg9wn5yUfejxlZFaRCiQyEPokxW4m4C:sCTgoHf0TaEhyEgH4mL

Score
10/10

Malware Config

Targets

    • Target

      017e0419fcb849cab6c7311d7b71f671570b71e1239f78fa3201eea819233876

    • Size

      15.8MB

    • MD5

      8b93e40cdda9545f47c93bb0d3b44541

    • SHA1

      9bf3a52a30a783062cedfa420c55be04f048eb18

    • SHA256

      017e0419fcb849cab6c7311d7b71f671570b71e1239f78fa3201eea819233876

    • SHA512

      14119f9ab7f5cff36613759db9441d6626461753859035f239c7ccd214a6a093c039a8253954558a7484325dca7b35a8f8e8d66293fe7a1dd1678fc2206a9a1a

    • SSDEEP

      393216:sCdpg9wn5yUfejxlZFaRCiQyEPokxW4m4C:sCTgoHf0TaEhyEgH4mL

    Score
    10/10
    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks