General

  • Target

    88a871d4b447bb4d89dfebefb227e844

  • Size

    108KB

  • Sample

    240202-f1g1psghgq

  • MD5

    88a871d4b447bb4d89dfebefb227e844

  • SHA1

    091d23777a3dec688806adcd7adb85b9bbeb1296

  • SHA256

    5d5c7ae429a9d3f0e4eb10fbf1af2c7ebbe2e88b776f517d9547e5ebb2d993da

  • SHA512

    1005198dae08f75c3cd7f1f1d3bba980f439499775bbdb3cc20020701a06eece9c5348ce40af941885c0264659955a67a784f3919a45b0f534617a09d3ca5dd2

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp9ggGQEUIEP:n3C9BRo7tvnJ9iUIA

Malware Config

Targets

    • Target

      88a871d4b447bb4d89dfebefb227e844

    • Size

      108KB

    • MD5

      88a871d4b447bb4d89dfebefb227e844

    • SHA1

      091d23777a3dec688806adcd7adb85b9bbeb1296

    • SHA256

      5d5c7ae429a9d3f0e4eb10fbf1af2c7ebbe2e88b776f517d9547e5ebb2d993da

    • SHA512

      1005198dae08f75c3cd7f1f1d3bba980f439499775bbdb3cc20020701a06eece9c5348ce40af941885c0264659955a67a784f3919a45b0f534617a09d3ca5dd2

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp9ggGQEUIEP:n3C9BRo7tvnJ9iUIA

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks