General

  • Target

    5775e276c321c39710cc5fc9b16678b99fb62aa7f382b3c3c3d23dedc5869447.exe

  • Size

    87KB

  • Sample

    240519-mgk2kseb5w

  • MD5

    162dd95e1a00653dcebaf8613d39c6e0

  • SHA1

    301b523e943c9c42f41a3d2658ccfef35cf13307

  • SHA256

    5775e276c321c39710cc5fc9b16678b99fb62aa7f382b3c3c3d23dedc5869447

  • SHA512

    f5c97c667ea65d68c6c42157f294fea5a9880131a59a651ff4a19900db3492bcd8ebdb50fcb1e9570782f0d7e2675fb0b61f6310455207faf16dcdf5edd14239

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2wV3jaCJ5jH3en:ymb3NkkiQ3mdBjF+3TU2K3bJZX6

Malware Config

Targets

    • Target

      5775e276c321c39710cc5fc9b16678b99fb62aa7f382b3c3c3d23dedc5869447.exe

    • Size

      87KB

    • MD5

      162dd95e1a00653dcebaf8613d39c6e0

    • SHA1

      301b523e943c9c42f41a3d2658ccfef35cf13307

    • SHA256

      5775e276c321c39710cc5fc9b16678b99fb62aa7f382b3c3c3d23dedc5869447

    • SHA512

      f5c97c667ea65d68c6c42157f294fea5a9880131a59a651ff4a19900db3492bcd8ebdb50fcb1e9570782f0d7e2675fb0b61f6310455207faf16dcdf5edd14239

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2wV3jaCJ5jH3en:ymb3NkkiQ3mdBjF+3TU2K3bJZX6

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks