General

  • Target

    e838c4d3facc71e7b09855002b06469ab8a9d7855bbff833e2e54690e5534947

  • Size

    1.1MB

  • Sample

    240706-l7p8jsvhnq

  • MD5

    072defa855b863c4a97b96485494137e

  • SHA1

    ca576e898d99d7b4e28925a648b90486021929df

  • SHA256

    e838c4d3facc71e7b09855002b06469ab8a9d7855bbff833e2e54690e5534947

  • SHA512

    a6a9450652c80e27c8d2bc720da9fdd9eb8d89efc159abedde0bffdc9a0ae925e212c452efe3c0879a1519b20391c7a9472ab8d2b083374820fd6d59b03794c1

  • SSDEEP

    24576:0IhBEtgRWj0nWUp8zFsnRyXu59Fl4wI7kA7hjQVMeROE6K1S:0rtgsuLp3nRy+XFl4f737hjfeRv60S

Malware Config

Targets

    • Target

      e838c4d3facc71e7b09855002b06469ab8a9d7855bbff833e2e54690e5534947

    • Size

      1.1MB

    • MD5

      072defa855b863c4a97b96485494137e

    • SHA1

      ca576e898d99d7b4e28925a648b90486021929df

    • SHA256

      e838c4d3facc71e7b09855002b06469ab8a9d7855bbff833e2e54690e5534947

    • SHA512

      a6a9450652c80e27c8d2bc720da9fdd9eb8d89efc159abedde0bffdc9a0ae925e212c452efe3c0879a1519b20391c7a9472ab8d2b083374820fd6d59b03794c1

    • SSDEEP

      24576:0IhBEtgRWj0nWUp8zFsnRyXu59Fl4wI7kA7hjQVMeROE6K1S:0rtgsuLp3nRy+XFl4f737hjfeRv60S

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Downloads MZ/PE file

    • Drops file in Drivers directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks