General

  • Target

    edbcafea5f3868a6fa137ce6b9a224e0.exe.bin.exe

  • Size

    66KB

  • Sample

    240518-t5c47scg2t

  • MD5

    edbcafea5f3868a6fa137ce6b9a224e0

  • SHA1

    0a51784f90d899c7bb41db5cf69f5b48ce2ccc34

  • SHA256

    459870358eea44dfa21d15266c3ea084f15a709a91944b576549bd1927b19bf7

  • SHA512

    1e2047072fcdd829a2fe16e46e57b882690fa6e325af0d788b232f50e1ea366c94b5e8e0fd9726f17137921272639f51e9a3ef94aa3eff1795e95bae10acef97

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFdJUDbAIO:ymb3NkkiQ3mdBjFIFdJ8bm

Malware Config

Targets

    • Target

      edbcafea5f3868a6fa137ce6b9a224e0.exe.bin.exe

    • Size

      66KB

    • MD5

      edbcafea5f3868a6fa137ce6b9a224e0

    • SHA1

      0a51784f90d899c7bb41db5cf69f5b48ce2ccc34

    • SHA256

      459870358eea44dfa21d15266c3ea084f15a709a91944b576549bd1927b19bf7

    • SHA512

      1e2047072fcdd829a2fe16e46e57b882690fa6e325af0d788b232f50e1ea366c94b5e8e0fd9726f17137921272639f51e9a3ef94aa3eff1795e95bae10acef97

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFdJUDbAIO:ymb3NkkiQ3mdBjFIFdJ8bm

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks