General

  • Target

    047665fb6bd95566a89ad675188d0e074456feed05ff46c6c7f527bd6b3edac9.exe

  • Size

    497KB

  • Sample

    240521-xy78jsfe43

  • MD5

    203c7d849bcedf90f3a80f7042ec0650

  • SHA1

    844e7da681f46ef55df70154f31bfd8a1c1d46c1

  • SHA256

    047665fb6bd95566a89ad675188d0e074456feed05ff46c6c7f527bd6b3edac9

  • SHA512

    6b64c75e7aef5b6fa751cc4a824a6da5dcdef37700d81a20a2c170155cb5d40fe3b398c0ec562ae039af1e5bbaca68f4c19acdca471968c91ef811e90d8c43d2

  • SSDEEP

    12288:S4wFHoSyoS3ebeFmFVvlrmwcT4wpteFmFTxj:0KFmFVtrRcFEFmF5

Malware Config

Targets

    • Target

      047665fb6bd95566a89ad675188d0e074456feed05ff46c6c7f527bd6b3edac9.exe

    • Size

      497KB

    • MD5

      203c7d849bcedf90f3a80f7042ec0650

    • SHA1

      844e7da681f46ef55df70154f31bfd8a1c1d46c1

    • SHA256

      047665fb6bd95566a89ad675188d0e074456feed05ff46c6c7f527bd6b3edac9

    • SHA512

      6b64c75e7aef5b6fa751cc4a824a6da5dcdef37700d81a20a2c170155cb5d40fe3b398c0ec562ae039af1e5bbaca68f4c19acdca471968c91ef811e90d8c43d2

    • SSDEEP

      12288:S4wFHoSyoS3ebeFmFVvlrmwcT4wpteFmFTxj:0KFmFVtrRcFEFmF5

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks