General

  • Target

    315f234158dc5eb925a46b82788db6dcd03a5df216e42bb17e21ecd54158b531

  • Size

    228KB

  • Sample

    240605-znj43shb6x

  • MD5

    5ef723130ccec48dfff20891ca4d3df6

  • SHA1

    e09fc341397993bda6034abc239cc27b6482ee52

  • SHA256

    315f234158dc5eb925a46b82788db6dcd03a5df216e42bb17e21ecd54158b531

  • SHA512

    725c5c5de1d048a590a1f70843fe384b13d2c423eb0bcdefa06258499f8733da0e9054efcd48ca16aa7f8ca3d9054c6018d7ba6b30dd6cfc4b54f346792ba4ce

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4xLn/c15:n3C9BRo7MlrWKo+lxKk15

Malware Config

Targets

    • Target

      315f234158dc5eb925a46b82788db6dcd03a5df216e42bb17e21ecd54158b531

    • Size

      228KB

    • MD5

      5ef723130ccec48dfff20891ca4d3df6

    • SHA1

      e09fc341397993bda6034abc239cc27b6482ee52

    • SHA256

      315f234158dc5eb925a46b82788db6dcd03a5df216e42bb17e21ecd54158b531

    • SHA512

      725c5c5de1d048a590a1f70843fe384b13d2c423eb0bcdefa06258499f8733da0e9054efcd48ca16aa7f8ca3d9054c6018d7ba6b30dd6cfc4b54f346792ba4ce

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4xLn/c15:n3C9BRo7MlrWKo+lxKk15

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks