General

  • Target

    815442f7f882f4d272c50f57132a602bfa79090442c0c7d12db187f65555fea2.exe

  • Size

    367KB

  • Sample

    240523-dv5tgaca4y

  • MD5

    08e2e76b8ae5ddd5b1d5113849a3eba0

  • SHA1

    b4ac3da5a19263c6a15040d708b3ae2899281f6e

  • SHA256

    815442f7f882f4d272c50f57132a602bfa79090442c0c7d12db187f65555fea2

  • SHA512

    db8f95a38b50e11943f2869e0d379ecebb46b3ef90dc7b9c25a7268b2cafdb7b395c825dedc715260134e378223ba44715063d6b0ed9060be33327c4be80575a

  • SSDEEP

    6144:9cm4FmowdHoSdSyEAxyx/ZrTTr4qIMgE8L:/4wFHoSQuxy3rTXIM18L

Malware Config

Targets

    • Target

      815442f7f882f4d272c50f57132a602bfa79090442c0c7d12db187f65555fea2.exe

    • Size

      367KB

    • MD5

      08e2e76b8ae5ddd5b1d5113849a3eba0

    • SHA1

      b4ac3da5a19263c6a15040d708b3ae2899281f6e

    • SHA256

      815442f7f882f4d272c50f57132a602bfa79090442c0c7d12db187f65555fea2

    • SHA512

      db8f95a38b50e11943f2869e0d379ecebb46b3ef90dc7b9c25a7268b2cafdb7b395c825dedc715260134e378223ba44715063d6b0ed9060be33327c4be80575a

    • SSDEEP

      6144:9cm4FmowdHoSdSyEAxyx/ZrTTr4qIMgE8L:/4wFHoSQuxy3rTXIM18L

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks