General

  • Target

    07dd3d543fc8f404d24038cd98c84630.bin

  • Size

    520KB

  • Sample

    240606-bkm5kadd51

  • MD5

    07dd3d543fc8f404d24038cd98c84630

  • SHA1

    668d65931dc699ace3e3f2859d041b9cbef783ed

  • SHA256

    5dfd01259c5a6faedfd924700acde29f27b9ee4759d75085e60ea6495e34d26c

  • SHA512

    a58c48e606e5a3885e75920c046b4ce814d0f294600134ae1cd77fe1254aa5820f8b0c06a4f44220eb672a3ce39ec2b792cb0f0327e331bcc2ad3bf228119b4c

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2CfNnkymTwaJ3o89H3P:q7Tc2NYHUrAwfMHNnpls489/

Malware Config

Targets

    • Target

      07dd3d543fc8f404d24038cd98c84630.bin

    • Size

      520KB

    • MD5

      07dd3d543fc8f404d24038cd98c84630

    • SHA1

      668d65931dc699ace3e3f2859d041b9cbef783ed

    • SHA256

      5dfd01259c5a6faedfd924700acde29f27b9ee4759d75085e60ea6495e34d26c

    • SHA512

      a58c48e606e5a3885e75920c046b4ce814d0f294600134ae1cd77fe1254aa5820f8b0c06a4f44220eb672a3ce39ec2b792cb0f0327e331bcc2ad3bf228119b4c

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2CfNnkymTwaJ3o89H3P:q7Tc2NYHUrAwfMHNnpls489/

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks