General

  • Target

    7924a80acfb3296331ad865be88c6080531a28ab78b709226a03112a4afeb5cf

  • Size

    57KB

  • Sample

    240606-bk5dvaed39

  • MD5

    0b5b1f58a672215ccb12d440647c41a4

  • SHA1

    823285f3be810c09ed6e4620be648abb37587edb

  • SHA256

    7924a80acfb3296331ad865be88c6080531a28ab78b709226a03112a4afeb5cf

  • SHA512

    ebdc5f63a143053cacca870c36442fa6225711e7d7780de1433ae82df07eae2edc7db46cdfd098f80ce430fb434ca1d994ac08d9c789a1e9d08d91ff20d5dfca

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuSwFaEru:ymb3NkkiQ3mdBjFIvIFaEru

Malware Config

Targets

    • Target

      7924a80acfb3296331ad865be88c6080531a28ab78b709226a03112a4afeb5cf

    • Size

      57KB

    • MD5

      0b5b1f58a672215ccb12d440647c41a4

    • SHA1

      823285f3be810c09ed6e4620be648abb37587edb

    • SHA256

      7924a80acfb3296331ad865be88c6080531a28ab78b709226a03112a4afeb5cf

    • SHA512

      ebdc5f63a143053cacca870c36442fa6225711e7d7780de1433ae82df07eae2edc7db46cdfd098f80ce430fb434ca1d994ac08d9c789a1e9d08d91ff20d5dfca

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuSwFaEru:ymb3NkkiQ3mdBjFIvIFaEru

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks