General

  • Target

    22066d3ad501b7744f5bec1792a8f7b0N.exe

  • Size

    68KB

  • Sample

    240714-z8w95stgmq

  • MD5

    22066d3ad501b7744f5bec1792a8f7b0

  • SHA1

    84c7453517ed66e4c703a685dbceed6166688dc7

  • SHA256

    2425d10ccddee6b8cba576981be3641743a27bd056118982ddc868a67c204891

  • SHA512

    517de97c4a65f8bd5423f7e8ed449fd8fafd18039764729dc27b3e52483e8ef01506b6a858f2c05b19276217fb48e68788488d86c0446622756011079210b1e0

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUuYp+5C8+LuvdP:ymb3NkkiQ3mdBjF0yMliP

Malware Config

Targets

    • Target

      22066d3ad501b7744f5bec1792a8f7b0N.exe

    • Size

      68KB

    • MD5

      22066d3ad501b7744f5bec1792a8f7b0

    • SHA1

      84c7453517ed66e4c703a685dbceed6166688dc7

    • SHA256

      2425d10ccddee6b8cba576981be3641743a27bd056118982ddc868a67c204891

    • SHA512

      517de97c4a65f8bd5423f7e8ed449fd8fafd18039764729dc27b3e52483e8ef01506b6a858f2c05b19276217fb48e68788488d86c0446622756011079210b1e0

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yUuYp+5C8+LuvdP:ymb3NkkiQ3mdBjF0yMliP

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks