General

  • Target

    9774a87ea60f93acfffae7b330efcade59c03a822d9977f632b3145024b0337e.exe

  • Size

    54KB

  • Sample

    240523-19bkhaba79

  • MD5

    2929f246e62a4c6c1d98c3b80c039450

  • SHA1

    5bb7ebda5ec85344672af4ac32c42b77d3d6a0d7

  • SHA256

    9774a87ea60f93acfffae7b330efcade59c03a822d9977f632b3145024b0337e

  • SHA512

    24e08a71a33f7d377919dc75f76b919383ca593469e802c2a795fe44d8c41c0571c9772ba548fb303e5a9706a13a5c2f7fd6cd248c3733ef37cf151d78d5c581

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI57Bxl:ymb3NkkiQ3mdBjFIVBxl

Malware Config

Targets

    • Target

      9774a87ea60f93acfffae7b330efcade59c03a822d9977f632b3145024b0337e.exe

    • Size

      54KB

    • MD5

      2929f246e62a4c6c1d98c3b80c039450

    • SHA1

      5bb7ebda5ec85344672af4ac32c42b77d3d6a0d7

    • SHA256

      9774a87ea60f93acfffae7b330efcade59c03a822d9977f632b3145024b0337e

    • SHA512

      24e08a71a33f7d377919dc75f76b919383ca593469e802c2a795fe44d8c41c0571c9772ba548fb303e5a9706a13a5c2f7fd6cd248c3733ef37cf151d78d5c581

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI57Bxl:ymb3NkkiQ3mdBjFIVBxl

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks