General

  • Target

    34ee5d3712831c6cb410521735b3b3754a84a0085b2b4486f9e808e3c14ff708.exe

  • Size

    103KB

  • Sample

    240519-l7gamsde28

  • MD5

    08b97e41bf9d446f27b6534ec6b1cc70

  • SHA1

    f074c42045241ef1c6af19f878fab0ba789424a6

  • SHA256

    34ee5d3712831c6cb410521735b3b3754a84a0085b2b4486f9e808e3c14ff708

  • SHA512

    cdc0b7231a02b2ad6e7ec7bedd6b6b2175139219a5c463a13d0d4248508c65fecfe6fbe7a22739a9c6b2ee9eaaf81467ba3f32e4e6c066ae7f63ce5cfb12d451

  • SSDEEP

    3072:vhOmTsF93UYfwC6GIoutC5Y5mqZRdu5XYejxx2:vcm4FmowdHoSC5Y55RdudYZ

Malware Config

Targets

    • Target

      34ee5d3712831c6cb410521735b3b3754a84a0085b2b4486f9e808e3c14ff708.exe

    • Size

      103KB

    • MD5

      08b97e41bf9d446f27b6534ec6b1cc70

    • SHA1

      f074c42045241ef1c6af19f878fab0ba789424a6

    • SHA256

      34ee5d3712831c6cb410521735b3b3754a84a0085b2b4486f9e808e3c14ff708

    • SHA512

      cdc0b7231a02b2ad6e7ec7bedd6b6b2175139219a5c463a13d0d4248508c65fecfe6fbe7a22739a9c6b2ee9eaaf81467ba3f32e4e6c066ae7f63ce5cfb12d451

    • SSDEEP

      3072:vhOmTsF93UYfwC6GIoutC5Y5mqZRdu5XYejxx2:vcm4FmowdHoSC5Y55RdudYZ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks