General

  • Target

    37c29458daff98978480a1b7d9bd1e50N.exe

  • Size

    94KB

  • Sample

    240709-pcsa7svfmc

  • MD5

    37c29458daff98978480a1b7d9bd1e50

  • SHA1

    28098756c1028aa58efc9edb987e45f78d66e177

  • SHA256

    691723493e45bfea37d5f0370f46c4117808b84d2a1af1f4a494e51a273d66d8

  • SHA512

    e7ecdccaff6b1c6e5370a3548aef4b979af2f9f7049d5dd8666fb17ee6b16c65bcaeeb797997ff92e35d04c5cf958dc22cfc84789ea639c54c13c5028413e76f

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoLuePjDYlR3hnjKXIQSe9oEYL:ymb3NkkiQ3mdBjFoLucjDilOZho5

Malware Config

Targets

    • Target

      37c29458daff98978480a1b7d9bd1e50N.exe

    • Size

      94KB

    • MD5

      37c29458daff98978480a1b7d9bd1e50

    • SHA1

      28098756c1028aa58efc9edb987e45f78d66e177

    • SHA256

      691723493e45bfea37d5f0370f46c4117808b84d2a1af1f4a494e51a273d66d8

    • SHA512

      e7ecdccaff6b1c6e5370a3548aef4b979af2f9f7049d5dd8666fb17ee6b16c65bcaeeb797997ff92e35d04c5cf958dc22cfc84789ea639c54c13c5028413e76f

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoLuePjDYlR3hnjKXIQSe9oEYL:ymb3NkkiQ3mdBjFoLucjDilOZho5

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks