General

  • Target

    9be7492a556324031faad4141cfe728f54616d18a80a02bae86dee7d5eb4a9f0.exe

  • Size

    57KB

  • Sample

    240523-2nxfhsca3x

  • MD5

    0097145e437bfb2816572f03e4034330

  • SHA1

    51f24c9c3d87aa6eef1ead662d10aedb68921964

  • SHA256

    9be7492a556324031faad4141cfe728f54616d18a80a02bae86dee7d5eb4a9f0

  • SHA512

    ea212fca5151c2108c559dd139fd9bb6bb34a777b1e76e9c0e94f37bf83e990aa4192a3e25655666cd5a9d6754fd0d95c01fd5ec07469f287659892cd9e6d07a

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuSwFaEQ:ymb3NkkiQ3mdBjFIvIFaEQ

Malware Config

Targets

    • Target

      9be7492a556324031faad4141cfe728f54616d18a80a02bae86dee7d5eb4a9f0.exe

    • Size

      57KB

    • MD5

      0097145e437bfb2816572f03e4034330

    • SHA1

      51f24c9c3d87aa6eef1ead662d10aedb68921964

    • SHA256

      9be7492a556324031faad4141cfe728f54616d18a80a02bae86dee7d5eb4a9f0

    • SHA512

      ea212fca5151c2108c559dd139fd9bb6bb34a777b1e76e9c0e94f37bf83e990aa4192a3e25655666cd5a9d6754fd0d95c01fd5ec07469f287659892cd9e6d07a

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuSwFaEQ:ymb3NkkiQ3mdBjFIvIFaEQ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks