General

  • Target

    b7e748f8044d537efa26e93ed2165daad174ffbe11570f66045e1162f3136a3c

  • Size

    78KB

  • Sample

    240706-ce8pravflf

  • MD5

    a4146dffea7e26ed0597e63467803765

  • SHA1

    ff7933babc7d2dd9d0b9dfd032787604b5f4b3aa

  • SHA256

    b7e748f8044d537efa26e93ed2165daad174ffbe11570f66045e1162f3136a3c

  • SHA512

    53dbd9dbf2bdd137ae06f2ab0706ac21e03cc6b6550bfe8db3f42c65d87f4fb3b83cd3e84a7da921f2086f8f9e37131ada27de858ab83359c83b226b76a35748

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5ZzVIR:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCZIR

Malware Config

Targets

    • Target

      b7e748f8044d537efa26e93ed2165daad174ffbe11570f66045e1162f3136a3c

    • Size

      78KB

    • MD5

      a4146dffea7e26ed0597e63467803765

    • SHA1

      ff7933babc7d2dd9d0b9dfd032787604b5f4b3aa

    • SHA256

      b7e748f8044d537efa26e93ed2165daad174ffbe11570f66045e1162f3136a3c

    • SHA512

      53dbd9dbf2bdd137ae06f2ab0706ac21e03cc6b6550bfe8db3f42c65d87f4fb3b83cd3e84a7da921f2086f8f9e37131ada27de858ab83359c83b226b76a35748

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5ZzVIR:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCZIR

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks