General

  • Target

    04ee4cd7e7574936b9aea6ee2cdd1fbcbb2fc1b0a9e4e2c2e43ef1450e88a9fc.exe

  • Size

    277KB

  • Sample

    240519-lqq4hsce49

  • MD5

    d1ee59a92917dd10adf2589ac66a12d0

  • SHA1

    1e843e956d1360f249380b3550be08a348ec4f42

  • SHA256

    04ee4cd7e7574936b9aea6ee2cdd1fbcbb2fc1b0a9e4e2c2e43ef1450e88a9fc

  • SHA512

    622793da1593174234ac95d253edfc5826ffff8f4d54ba0e30ad039fdbe6c570c07c77dbeb358e516cd1c8590bf7be22072f0c41fd47f0fe1d9448f19c2b111c

  • SSDEEP

    6144:n3C9BRIG0asYFm71m8+GdkB9yMu7Vveme:n3C9uYA71kSMuk

Malware Config

Targets

    • Target

      04ee4cd7e7574936b9aea6ee2cdd1fbcbb2fc1b0a9e4e2c2e43ef1450e88a9fc.exe

    • Size

      277KB

    • MD5

      d1ee59a92917dd10adf2589ac66a12d0

    • SHA1

      1e843e956d1360f249380b3550be08a348ec4f42

    • SHA256

      04ee4cd7e7574936b9aea6ee2cdd1fbcbb2fc1b0a9e4e2c2e43ef1450e88a9fc

    • SHA512

      622793da1593174234ac95d253edfc5826ffff8f4d54ba0e30ad039fdbe6c570c07c77dbeb358e516cd1c8590bf7be22072f0c41fd47f0fe1d9448f19c2b111c

    • SSDEEP

      6144:n3C9BRIG0asYFm71m8+GdkB9yMu7Vveme:n3C9uYA71kSMuk

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks