General

  • Target

    395d82fd490880f2cc63f406058a099ba3ff22d50640a40f54597d168029b2b7

  • Size

    65KB

  • Sample

    240703-zew3aawfll

  • MD5

    43bdd0c48aea8779068e72bff04c3f1c

  • SHA1

    9f7298a064e6905c13bfc12a1a53b4c9f1c27432

  • SHA256

    395d82fd490880f2cc63f406058a099ba3ff22d50640a40f54597d168029b2b7

  • SHA512

    d5be94300d010919a839c95cae6a33afd6609b1102edc3c46f4e42561fd3b50fa995ca97a0f2b4c0af032dc71e13a59df108dc048da7cc07ab54adce8d4b43e9

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6Mu/ePS3AD:ymb3NkkiQ3mdBjFI46TQD

Malware Config

Targets

    • Target

      395d82fd490880f2cc63f406058a099ba3ff22d50640a40f54597d168029b2b7

    • Size

      65KB

    • MD5

      43bdd0c48aea8779068e72bff04c3f1c

    • SHA1

      9f7298a064e6905c13bfc12a1a53b4c9f1c27432

    • SHA256

      395d82fd490880f2cc63f406058a099ba3ff22d50640a40f54597d168029b2b7

    • SHA512

      d5be94300d010919a839c95cae6a33afd6609b1102edc3c46f4e42561fd3b50fa995ca97a0f2b4c0af032dc71e13a59df108dc048da7cc07ab54adce8d4b43e9

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6Mu/ePS3AD:ymb3NkkiQ3mdBjFI46TQD

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks