General

  • Target

    73c0baaae752addd26288324a52fa6521f1d97f2d556f3bd1ecc51c4e36833ec.exe

  • Size

    67KB

  • Sample

    240519-mp9d5sed92

  • MD5

    ccd52c6dfd02d57fb0ef7741e1a24510

  • SHA1

    103a8c9753059bd92788fc804fcf2d1e013b7217

  • SHA256

    73c0baaae752addd26288324a52fa6521f1d97f2d556f3bd1ecc51c4e36833ec

  • SHA512

    207f6507d8e327d96cfbeb281f74d3026496a6d6157c67f913c2ccde71300cdea25393282c1b1b467ff42a47bb8348384c0deb79282bc8c6c2ffef6629d209f1

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFdJUDbAIaS:ymb3NkkiQ3mdBjFIFdJ8bP

Malware Config

Targets

    • Target

      73c0baaae752addd26288324a52fa6521f1d97f2d556f3bd1ecc51c4e36833ec.exe

    • Size

      67KB

    • MD5

      ccd52c6dfd02d57fb0ef7741e1a24510

    • SHA1

      103a8c9753059bd92788fc804fcf2d1e013b7217

    • SHA256

      73c0baaae752addd26288324a52fa6521f1d97f2d556f3bd1ecc51c4e36833ec

    • SHA512

      207f6507d8e327d96cfbeb281f74d3026496a6d6157c67f913c2ccde71300cdea25393282c1b1b467ff42a47bb8348384c0deb79282bc8c6c2ffef6629d209f1

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFdJUDbAIaS:ymb3NkkiQ3mdBjFIFdJ8bP

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks