General

  • Target

    13da663ebec6b4d332ed11ed9805a3cc

  • Size

    349KB

  • Sample

    240410-gbhrdadh97

  • MD5

    13da663ebec6b4d332ed11ed9805a3cc

  • SHA1

    7bcb5993064eadd748ed2c19491d871b2db97689

  • SHA256

    b5eb5e1548f0b802410b8469443191d8df653bcb6ad9edb573b11d85c4437625

  • SHA512

    f3e0ba43249a00fc30efd29115c31ea20d0559171aaf4d3d40969e97d62be632241f7be5ac3cdf7f5b9e3761ae775364dae47ec58be34bea461d77d493db43be

  • SSDEEP

    6144:bcm4FmowdHoSgWrXD486jCpoAhlq1mEjBqLyOSlhNFF2L:h4wFHoSgWj168w1VjsyvhNFF2L

Malware Config

Targets

    • Target

      13da663ebec6b4d332ed11ed9805a3cc

    • Size

      349KB

    • MD5

      13da663ebec6b4d332ed11ed9805a3cc

    • SHA1

      7bcb5993064eadd748ed2c19491d871b2db97689

    • SHA256

      b5eb5e1548f0b802410b8469443191d8df653bcb6ad9edb573b11d85c4437625

    • SHA512

      f3e0ba43249a00fc30efd29115c31ea20d0559171aaf4d3d40969e97d62be632241f7be5ac3cdf7f5b9e3761ae775364dae47ec58be34bea461d77d493db43be

    • SSDEEP

      6144:bcm4FmowdHoSgWrXD486jCpoAhlq1mEjBqLyOSlhNFF2L:h4wFHoSgWj168w1VjsyvhNFF2L

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks