General

  • Target

    2024-06-20_547aec3c6fe67362189e007400e90575_mafia

  • Size

    1.3MB

  • Sample

    240620-p6t2wssfrq

  • MD5

    547aec3c6fe67362189e007400e90575

  • SHA1

    e07828873f4d90036d679302dfa6b3110148dbe3

  • SHA256

    79b695991319c236dff7955c631ba33808dcac3f2a9ab9b72c5c87ea20a13075

  • SHA512

    dedc9d3503dea04395a6a0a797ffc30f4bd4de1dd521743781d472454868de88f11da376fad18d629841d724699bbc3c681e89772d8e8a7af926967153552c6b

  • SSDEEP

    24576:vGzhqOueVJqUO6tGS7n7P7B6MgsR64/iK6LfGJErGCkop0sUPYud9mjauRya5Iyz:vGo6tJ3TB6MvQOiMeGPop0sUPYu7U9r

Malware Config

Targets

    • Target

      2024-06-20_547aec3c6fe67362189e007400e90575_mafia

    • Size

      1.3MB

    • MD5

      547aec3c6fe67362189e007400e90575

    • SHA1

      e07828873f4d90036d679302dfa6b3110148dbe3

    • SHA256

      79b695991319c236dff7955c631ba33808dcac3f2a9ab9b72c5c87ea20a13075

    • SHA512

      dedc9d3503dea04395a6a0a797ffc30f4bd4de1dd521743781d472454868de88f11da376fad18d629841d724699bbc3c681e89772d8e8a7af926967153552c6b

    • SSDEEP

      24576:vGzhqOueVJqUO6tGS7n7P7B6MgsR64/iK6LfGJErGCkop0sUPYud9mjauRya5Iyz:vGo6tJ3TB6MvQOiMeGPop0sUPYu7U9r

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Drops startup file

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks