General

  • Target

    c6a288e985817604bb8b25bc197994f0.exe

  • Size

    550KB

  • Sample

    240101-ls9zeagbcj

  • MD5

    c6a288e985817604bb8b25bc197994f0

  • SHA1

    3028da1a929697b6c53313e7b8ba98724ce0d3f7

  • SHA256

    dd1e6900a5eb67ce7506acda00997891a6e3804b0b4c2813bafade31cdacb5e4

  • SHA512

    eed3aa3950f92dce09a1827db2ce4e57a9146ac7c77c2e73e1bf633a054b08cd4ae6b8fbac354effafa9dad8fc1749fa2690c523cdf9853f62ba17cdbd21bb5a

  • SSDEEP

    12288:Dhp2Pf6Az34hmuFtWrTv5G0eQCt8sujVt91oS:tpY4hErToxJt+Zt

Malware Config

Targets

    • Target

      c6a288e985817604bb8b25bc197994f0.exe

    • Size

      550KB

    • MD5

      c6a288e985817604bb8b25bc197994f0

    • SHA1

      3028da1a929697b6c53313e7b8ba98724ce0d3f7

    • SHA256

      dd1e6900a5eb67ce7506acda00997891a6e3804b0b4c2813bafade31cdacb5e4

    • SHA512

      eed3aa3950f92dce09a1827db2ce4e57a9146ac7c77c2e73e1bf633a054b08cd4ae6b8fbac354effafa9dad8fc1749fa2690c523cdf9853f62ba17cdbd21bb5a

    • SSDEEP

      12288:Dhp2Pf6Az34hmuFtWrTv5G0eQCt8sujVt91oS:tpY4hErToxJt+Zt

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks