General

  • Target

    d1a8d0035654fd05ee4ec4d7410631a3ec777640ced059de481083f2fcb6dbac

  • Size

    4.8MB

  • Sample

    240418-qbgczsea72

  • MD5

    1d32a945df5cc490e5b9484b98eef6d6

  • SHA1

    48083ff30f3d60c9bc39f9fdc61410100e06ddd4

  • SHA256

    d1a8d0035654fd05ee4ec4d7410631a3ec777640ced059de481083f2fcb6dbac

  • SHA512

    18d7e497994cf7b539038b8ce2d9a14147ce04c3f4bf018caee9a025c4c7ccf20a57e7ae50e7ae9c9ae04ad74a40f073c4b812f1525b62d553dba3078263e2bf

  • SSDEEP

    98304:BnTQ1u4sWhmKH0j+wFyra4m5Yzy57pG6fTjRjz/gehMN+dzjve:BnTh4skmKHU+Za1H57zp/ghEzjve

Malware Config

Targets

    • Target

      d1a8d0035654fd05ee4ec4d7410631a3ec777640ced059de481083f2fcb6dbac

    • Size

      4.8MB

    • MD5

      1d32a945df5cc490e5b9484b98eef6d6

    • SHA1

      48083ff30f3d60c9bc39f9fdc61410100e06ddd4

    • SHA256

      d1a8d0035654fd05ee4ec4d7410631a3ec777640ced059de481083f2fcb6dbac

    • SHA512

      18d7e497994cf7b539038b8ce2d9a14147ce04c3f4bf018caee9a025c4c7ccf20a57e7ae50e7ae9c9ae04ad74a40f073c4b812f1525b62d553dba3078263e2bf

    • SSDEEP

      98304:BnTQ1u4sWhmKH0j+wFyra4m5Yzy57pG6fTjRjz/gehMN+dzjve:BnTh4skmKHU+Za1H57zp/ghEzjve

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks