General

  • Target

    334a0d91274e5f9970460c5c7da9c4802d388610e1d14ec685d475d586ed66fe.exe

  • Size

    54KB

  • Sample

    240522-xnzhnach5s

  • MD5

    149492700fbf4e3143a21e08136b0050

  • SHA1

    58fb980f99257a95a934688796049b2b10a4650f

  • SHA256

    334a0d91274e5f9970460c5c7da9c4802d388610e1d14ec685d475d586ed66fe

  • SHA512

    d97a07f808358b0b985f8b6b284ebdaece16002724808af379d7434709faf4f8ff870e88b10da7614a8f710aae70e004864d61dd57152aa16b147d3c8aba4705

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFM:ymb3NkkiQ3mdBjFIFM

Malware Config

Targets

    • Target

      334a0d91274e5f9970460c5c7da9c4802d388610e1d14ec685d475d586ed66fe.exe

    • Size

      54KB

    • MD5

      149492700fbf4e3143a21e08136b0050

    • SHA1

      58fb980f99257a95a934688796049b2b10a4650f

    • SHA256

      334a0d91274e5f9970460c5c7da9c4802d388610e1d14ec685d475d586ed66fe

    • SHA512

      d97a07f808358b0b985f8b6b284ebdaece16002724808af379d7434709faf4f8ff870e88b10da7614a8f710aae70e004864d61dd57152aa16b147d3c8aba4705

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFM:ymb3NkkiQ3mdBjFIFM

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks