General

  • Target

    404e340b281de4d3326b55908a49448ff23106126180fdca3303ca9d15dd2f17.exe

  • Size

    80KB

  • Sample

    240519-mah9eadf66

  • MD5

    05f18214473712a3fb15d2d9102ddc80

  • SHA1

    8425a48d90f27d55fdc944f2ae68b851ade6d815

  • SHA256

    404e340b281de4d3326b55908a49448ff23106126180fdca3303ca9d15dd2f17

  • SHA512

    b6f58a993d26e3df779d25543ecec3d91094cdd6fb949ef10a56adc14b1ac26624391461166939aba34f576988563bf3fdbf445ca9efadd7e1d888ce002aa374

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73t6MwIYSPEzf:ymb3NkkiQ3mdBjFo73t+SMb

Malware Config

Targets

    • Target

      404e340b281de4d3326b55908a49448ff23106126180fdca3303ca9d15dd2f17.exe

    • Size

      80KB

    • MD5

      05f18214473712a3fb15d2d9102ddc80

    • SHA1

      8425a48d90f27d55fdc944f2ae68b851ade6d815

    • SHA256

      404e340b281de4d3326b55908a49448ff23106126180fdca3303ca9d15dd2f17

    • SHA512

      b6f58a993d26e3df779d25543ecec3d91094cdd6fb949ef10a56adc14b1ac26624391461166939aba34f576988563bf3fdbf445ca9efadd7e1d888ce002aa374

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73t6MwIYSPEzf:ymb3NkkiQ3mdBjFo73t+SMb

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks