General

  • Target

    757cb168042b89e9d97f1e9fe8daa00e

  • Size

    145KB

  • Sample

    240125-zlnz9afbb6

  • MD5

    757cb168042b89e9d97f1e9fe8daa00e

  • SHA1

    fee1d0146a15271475423fcb7133441770ddfe8d

  • SHA256

    d9e44c499d71b76f0335ff684b99e122dc3ba2b5a5e2055de80a0a9a1dde796a

  • SHA512

    d0a0e74913b748f093eb94a2735000a5d920576b8b03b2fbc15d5d2a8c10f62872a6ce1f7920528c744dc98d1b115492c2367af6c7c7e9d894310f68fe0636a7

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp9FrHSwh/c/hdTWmxrP:n3C9BRo7tvnJ9Fywhk/hP

Malware Config

Targets

    • Target

      757cb168042b89e9d97f1e9fe8daa00e

    • Size

      145KB

    • MD5

      757cb168042b89e9d97f1e9fe8daa00e

    • SHA1

      fee1d0146a15271475423fcb7133441770ddfe8d

    • SHA256

      d9e44c499d71b76f0335ff684b99e122dc3ba2b5a5e2055de80a0a9a1dde796a

    • SHA512

      d0a0e74913b748f093eb94a2735000a5d920576b8b03b2fbc15d5d2a8c10f62872a6ce1f7920528c744dc98d1b115492c2367af6c7c7e9d894310f68fe0636a7

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp9FrHSwh/c/hdTWmxrP:n3C9BRo7tvnJ9Fywhk/hP

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks