General

  • Target

    8bdc303e8f0cdc255f2278fe7d12bbf8d124d5da88aa5277f8ed64e3ebca45ee.exe

  • Size

    394KB

  • Sample

    240523-z5zwvsha49

  • MD5

    1dbddd3ec0b1a44a6813b79f2a21e3d0

  • SHA1

    54de40a128c020b98d57250020017993defbf037

  • SHA256

    8bdc303e8f0cdc255f2278fe7d12bbf8d124d5da88aa5277f8ed64e3ebca45ee

  • SHA512

    b34c2754e1bbf1c6a3b98db6a952acdb17dc2915044e7fcdccd183b959da16ce9d4bfa4999d484503b75cede8e346737ec763b16fda7946eea632dd245b00636

  • SSDEEP

    6144:n3C9BRo7tvnJ9oH0IRgZvjkobjcSbcY+CaQdaFOY4iGFYtRdu/k:n3C9ytvngQjZbz+xt4vFB8

Malware Config

Targets

    • Target

      8bdc303e8f0cdc255f2278fe7d12bbf8d124d5da88aa5277f8ed64e3ebca45ee.exe

    • Size

      394KB

    • MD5

      1dbddd3ec0b1a44a6813b79f2a21e3d0

    • SHA1

      54de40a128c020b98d57250020017993defbf037

    • SHA256

      8bdc303e8f0cdc255f2278fe7d12bbf8d124d5da88aa5277f8ed64e3ebca45ee

    • SHA512

      b34c2754e1bbf1c6a3b98db6a952acdb17dc2915044e7fcdccd183b959da16ce9d4bfa4999d484503b75cede8e346737ec763b16fda7946eea632dd245b00636

    • SSDEEP

      6144:n3C9BRo7tvnJ9oH0IRgZvjkobjcSbcY+CaQdaFOY4iGFYtRdu/k:n3C9ytvngQjZbz+xt4vFB8

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks