General

  • Target

    7386cfcabec3b13f5230da2082a42625a001511901fc13e12a542e2ba075808f.exe

  • Size

    75KB

  • Sample

    240523-cgcebshg3z

  • MD5

    278a762a9c1cf73e41eaac48e36835a0

  • SHA1

    3e938477b6f61ceee87f1abb4ea6f839c9166fa0

  • SHA256

    7386cfcabec3b13f5230da2082a42625a001511901fc13e12a542e2ba075808f

  • SHA512

    351df3fec7bd5db745508f07d61881ad9c0a193ac2e1de1db3b089bfc8a7764b51c29dbe092532482904c0b6977b2c942b4c97ad0e5140b3404990fba3ebfbe4

  • SSDEEP

    1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWoFLAxZhMDzE8i:9hOmTsF93UYfwC6GIoutz5yLpOSD0

Malware Config

Targets

    • Target

      7386cfcabec3b13f5230da2082a42625a001511901fc13e12a542e2ba075808f.exe

    • Size

      75KB

    • MD5

      278a762a9c1cf73e41eaac48e36835a0

    • SHA1

      3e938477b6f61ceee87f1abb4ea6f839c9166fa0

    • SHA256

      7386cfcabec3b13f5230da2082a42625a001511901fc13e12a542e2ba075808f

    • SHA512

      351df3fec7bd5db745508f07d61881ad9c0a193ac2e1de1db3b089bfc8a7764b51c29dbe092532482904c0b6977b2c942b4c97ad0e5140b3404990fba3ebfbe4

    • SSDEEP

      1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWoFLAxZhMDzE8i:9hOmTsF93UYfwC6GIoutz5yLpOSD0

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks