General

  • Target

    30fa475fe687f3d043bc2ef1b5482a6e

  • Size

    196KB

  • Sample

    240409-1x9xjadf25

  • MD5

    30fa475fe687f3d043bc2ef1b5482a6e

  • SHA1

    4f4d914e518d1ad7843592d436ba041719a36c92

  • SHA256

    63a66e8a158e56cd575c82ef9a3121376d60fb04df32ac2c7843caca08962d48

  • SHA512

    dd32b6eea3ce039a51108ac92b6204399bcfda69e26ff1a4f94f8058de427a5ac3b13ebfa422239480518d69295d3157a3ef89674626427ab6bb07351d215bfd

  • SSDEEP

    1536:1vQBeOGtrYSSsrc93UBIfdC67m6AJiqpfg3Cn/uiYs6U3:1hOm2sI93UufdC67ciifmCnmiYJU3

Malware Config

Targets

    • Target

      30fa475fe687f3d043bc2ef1b5482a6e

    • Size

      196KB

    • MD5

      30fa475fe687f3d043bc2ef1b5482a6e

    • SHA1

      4f4d914e518d1ad7843592d436ba041719a36c92

    • SHA256

      63a66e8a158e56cd575c82ef9a3121376d60fb04df32ac2c7843caca08962d48

    • SHA512

      dd32b6eea3ce039a51108ac92b6204399bcfda69e26ff1a4f94f8058de427a5ac3b13ebfa422239480518d69295d3157a3ef89674626427ab6bb07351d215bfd

    • SSDEEP

      1536:1vQBeOGtrYSSsrc93UBIfdC67m6AJiqpfg3Cn/uiYs6U3:1hOm2sI93UufdC67ciifmCnmiYJU3

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks