Resubmissions

19/03/2024, 13:26

240319-qpwptsdh6t 10

19/03/2024, 13:14

240319-qg2k4scg79 10

General

  • Target

    d6353eddd340da2406a3afa50a5f8fbe

  • Size

    58KB

  • Sample

    240319-qg2k4scg79

  • MD5

    d6353eddd340da2406a3afa50a5f8fbe

  • SHA1

    cca790ade7f99d64539cdd64200c19ac190cb833

  • SHA256

    545ef9427276bb580b615cf60c572b73c6171226ee7b7053df538b7f3a91a543

  • SHA512

    5ed9de78a69b09ca2a92b42b9337f9ac24fe9d9bc11c0eb7fba80c7a2e3078f8e80b35df735eca3a005a6158be0a0874b005f606eb7a7ade7b3a075a84bbd8e2

  • SSDEEP

    1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNlIQldWuKL851O:khOmTsF93UYfwC6GIoutpYcvldWum82

Malware Config

Targets

    • Target

      d6353eddd340da2406a3afa50a5f8fbe

    • Size

      58KB

    • MD5

      d6353eddd340da2406a3afa50a5f8fbe

    • SHA1

      cca790ade7f99d64539cdd64200c19ac190cb833

    • SHA256

      545ef9427276bb580b615cf60c572b73c6171226ee7b7053df538b7f3a91a543

    • SHA512

      5ed9de78a69b09ca2a92b42b9337f9ac24fe9d9bc11c0eb7fba80c7a2e3078f8e80b35df735eca3a005a6158be0a0874b005f606eb7a7ade7b3a075a84bbd8e2

    • SSDEEP

      1536:kvQBeOGtrYS3srx93UBWfwC6Ggnouy8p5yAXNlIQldWuKL851O:khOmTsF93UYfwC6GIoutpYcvldWum82

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks