General

  • Target

    eda77fdec7d3001c85ee80c0acbe0170.exe.bin.exe

  • Size

    473KB

  • Sample

    240518-t4jwcsch52

  • MD5

    eda77fdec7d3001c85ee80c0acbe0170

  • SHA1

    ae7d34c3165c8470e9b88ba76db40e1bbc90cf9d

  • SHA256

    e5d9b2ffe30a12a870af75339794409656108853eaea0a1f1db39d4580a24853

  • SHA512

    d67410f8888c0d492aa468f600360abd758691fef53be5868b60e6b07f25b289dbc96ec9ca8dcd4c2d2f6a1b9261299c68e16cadcb50b7dc8e77d46649d681ab

  • SSDEEP

    6144:lcm7ImGddXmNt251UriZFwT+aZKl7pg1xBl:H7Tc2NYHUrAwT+OKLSjl

Malware Config

Targets

    • Target

      eda77fdec7d3001c85ee80c0acbe0170.exe.bin.exe

    • Size

      473KB

    • MD5

      eda77fdec7d3001c85ee80c0acbe0170

    • SHA1

      ae7d34c3165c8470e9b88ba76db40e1bbc90cf9d

    • SHA256

      e5d9b2ffe30a12a870af75339794409656108853eaea0a1f1db39d4580a24853

    • SHA512

      d67410f8888c0d492aa468f600360abd758691fef53be5868b60e6b07f25b289dbc96ec9ca8dcd4c2d2f6a1b9261299c68e16cadcb50b7dc8e77d46649d681ab

    • SSDEEP

      6144:lcm7ImGddXmNt251UriZFwT+aZKl7pg1xBl:H7Tc2NYHUrAwT+OKLSjl

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks