General

  • Target

    6ff52a9186a55a6e58a1a981ec5cd7152bd95a76ffbe95834ddf524decf8bae1

  • Size

    78KB

  • Sample

    240606-ayy9bach3x

  • MD5

    a05c1d66f4a4974218cdc432ad26373b

  • SHA1

    ce0ffddacee10cb77767acbdcde105c0cd061e67

  • SHA256

    6ff52a9186a55a6e58a1a981ec5cd7152bd95a76ffbe95834ddf524decf8bae1

  • SHA512

    c062d9a8ca22e9b4a6cd925a0fbd5d66735830275638e1684d18404c2746eb21d285dd6e4c35290108c1f2582f34680bfe0e65ea2cab20704540b452bd3eb0bf

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8YieVIJclPvPJtcdcb:ymb3NkkiQ3mdBjFo68YBVIJc9Jtxb

Malware Config

Targets

    • Target

      6ff52a9186a55a6e58a1a981ec5cd7152bd95a76ffbe95834ddf524decf8bae1

    • Size

      78KB

    • MD5

      a05c1d66f4a4974218cdc432ad26373b

    • SHA1

      ce0ffddacee10cb77767acbdcde105c0cd061e67

    • SHA256

      6ff52a9186a55a6e58a1a981ec5cd7152bd95a76ffbe95834ddf524decf8bae1

    • SHA512

      c062d9a8ca22e9b4a6cd925a0fbd5d66735830275638e1684d18404c2746eb21d285dd6e4c35290108c1f2582f34680bfe0e65ea2cab20704540b452bd3eb0bf

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8YieVIJclPvPJtcdcb:ymb3NkkiQ3mdBjFo68YBVIJc9Jtxb

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks