General

  • Target

    8ab8c325911da170ce169ff860545e6bf86fbfd597ce25602d4f07fbe708bb91.exe

  • Size

    483KB

  • Sample

    240519-mxz6faeg37

  • MD5

    165f392544dcb2af92b2d3423136e070

  • SHA1

    368ec5636fd5285c56b521fd5d0959dc21b746b2

  • SHA256

    8ab8c325911da170ce169ff860545e6bf86fbfd597ce25602d4f07fbe708bb91

  • SHA512

    b02febb689f2d4411eaf8cb9b715995bf4939a3c7c5a78b736fa26f0bf026e2d8d44da04710c58df0c7d2990dec0360d8970b7990545951229b01ea39f720526

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwu1b26X1wjhtSizjZ:q7Tc2NYHUrAwqzcP

Malware Config

Targets

    • Target

      8ab8c325911da170ce169ff860545e6bf86fbfd597ce25602d4f07fbe708bb91.exe

    • Size

      483KB

    • MD5

      165f392544dcb2af92b2d3423136e070

    • SHA1

      368ec5636fd5285c56b521fd5d0959dc21b746b2

    • SHA256

      8ab8c325911da170ce169ff860545e6bf86fbfd597ce25602d4f07fbe708bb91

    • SHA512

      b02febb689f2d4411eaf8cb9b715995bf4939a3c7c5a78b736fa26f0bf026e2d8d44da04710c58df0c7d2990dec0360d8970b7990545951229b01ea39f720526

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwu1b26X1wjhtSizjZ:q7Tc2NYHUrAwqzcP

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks