General

  • Target

    952c58f5bffc8f205d2501df57733262a54e4f7f8cd5a6d5e158d57bb1200809

  • Size

    11.7MB

  • Sample

    240524-ck1akahe71

  • MD5

    9650a86627a6d85f26b5d702e4602075

  • SHA1

    2cee1afbe5e9972211d8b8e7e51b0b2cc334149e

  • SHA256

    952c58f5bffc8f205d2501df57733262a54e4f7f8cd5a6d5e158d57bb1200809

  • SHA512

    cc0a9ccbdf005b02cadde7a9818a5144c96d7e49e00c393615f21c7159ef7d8a1310b3b1e41a93485e6f777244aa45ce61ceb495fd2c24fabdc2a081a9a35887

  • SSDEEP

    196608:SAQvhlLEhpxoW7FsGfHCLNsp9aoi5On8tnsSb2Wh2FC3URrd6eqzyQdWh:lQ4LFTfiepZigikC3UR5qmKI

Malware Config

Targets

    • Target

      952c58f5bffc8f205d2501df57733262a54e4f7f8cd5a6d5e158d57bb1200809

    • Size

      11.7MB

    • MD5

      9650a86627a6d85f26b5d702e4602075

    • SHA1

      2cee1afbe5e9972211d8b8e7e51b0b2cc334149e

    • SHA256

      952c58f5bffc8f205d2501df57733262a54e4f7f8cd5a6d5e158d57bb1200809

    • SHA512

      cc0a9ccbdf005b02cadde7a9818a5144c96d7e49e00c393615f21c7159ef7d8a1310b3b1e41a93485e6f777244aa45ce61ceb495fd2c24fabdc2a081a9a35887

    • SSDEEP

      196608:SAQvhlLEhpxoW7FsGfHCLNsp9aoi5On8tnsSb2Wh2FC3URrd6eqzyQdWh:lQ4LFTfiepZigikC3UR5qmKI

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks