General

  • Target

    ca1242062c5298ac900027beedeb01402ab597cdae12f48b9717fb78969ca17b.exe

  • Size

    81KB

  • Sample

    240520-hn19xsge98

  • MD5

    b1cc20b00ff1607ef6999f2f9022bea0

  • SHA1

    9cf47f3f63fc361af590e3fb603f369d71617922

  • SHA256

    ca1242062c5298ac900027beedeb01402ab597cdae12f48b9717fb78969ca17b

  • SHA512

    7b45c109d414ea261cdba8b1ce73a72ba151e81c351aba62fffa455459c2decff76f1bcc57a784338e892dabff0dde3c39adc82c1fa59890d164cd1022974239

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7xCkTsIwtOa2dYS8njX:ymb3NkkiQ3mdBjFo7LAIbT6jX

Malware Config

Targets

    • Target

      ca1242062c5298ac900027beedeb01402ab597cdae12f48b9717fb78969ca17b.exe

    • Size

      81KB

    • MD5

      b1cc20b00ff1607ef6999f2f9022bea0

    • SHA1

      9cf47f3f63fc361af590e3fb603f369d71617922

    • SHA256

      ca1242062c5298ac900027beedeb01402ab597cdae12f48b9717fb78969ca17b

    • SHA512

      7b45c109d414ea261cdba8b1ce73a72ba151e81c351aba62fffa455459c2decff76f1bcc57a784338e892dabff0dde3c39adc82c1fa59890d164cd1022974239

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7xCkTsIwtOa2dYS8njX:ymb3NkkiQ3mdBjFo7LAIbT6jX

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks