General

  • Target

    1b2ce3335bf187934b3ff1ecec35ffeeeb3e6a466ba198f420bd497076986c04

  • Size

    91KB

  • Sample

    240605-x6dznsfd5t

  • MD5

    1a1ae2e680144242f4782250b7d79ff4

  • SHA1

    2054bd14a5b27a84a81d60cbeff729ce40970691

  • SHA256

    1b2ce3335bf187934b3ff1ecec35ffeeeb3e6a466ba198f420bd497076986c04

  • SHA512

    23ef356ace8ef0abd1d9492394ddaec513df67e46b370fdd7d067dc3619d74d84c05c7dd3237a2c8046c62c4f643644edf655800f8aad71178e9b62f1d9bacc6

  • SSDEEP

    1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpcJ:8hOmTsF93UYfwC6GIout0fmCiiiXA6mG

Malware Config

Targets

    • Target

      1b2ce3335bf187934b3ff1ecec35ffeeeb3e6a466ba198f420bd497076986c04

    • Size

      91KB

    • MD5

      1a1ae2e680144242f4782250b7d79ff4

    • SHA1

      2054bd14a5b27a84a81d60cbeff729ce40970691

    • SHA256

      1b2ce3335bf187934b3ff1ecec35ffeeeb3e6a466ba198f420bd497076986c04

    • SHA512

      23ef356ace8ef0abd1d9492394ddaec513df67e46b370fdd7d067dc3619d74d84c05c7dd3237a2c8046c62c4f643644edf655800f8aad71178e9b62f1d9bacc6

    • SSDEEP

      1536:8vQBeOGtrYS3srx93UBWfwC6Ggnouy80fg3Cip8iXAsG5M0u5YoWpcJ:8hOmTsF93UYfwC6GIout0fmCiiiXA6mG

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks