General

  • Target

    2dd57210a04bf4fd2a9f266b8e771310N.exe

  • Size

    138KB

  • Sample

    240721-3xwq1s1dne

  • MD5

    2dd57210a04bf4fd2a9f266b8e771310

  • SHA1

    477db9374b1f9c1ebc905907a9123a499fb578a1

  • SHA256

    6572e2eac63d7b435fe6d53b4def56b15ddb3f0fe5f946b42f6798a122f687ff

  • SHA512

    f2b22612e1899c8612f3e417fec17b457db8f7f6a8b23ed3f3659d2a6cdc7e983ba870ab68233d71797b1700b7764f949cb61c14d8ed757b7caf4ff948bcdb47

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBuItR8pz7sH:9cm4FmowdHoS4Bftapz7u

Malware Config

Targets

    • Target

      2dd57210a04bf4fd2a9f266b8e771310N.exe

    • Size

      138KB

    • MD5

      2dd57210a04bf4fd2a9f266b8e771310

    • SHA1

      477db9374b1f9c1ebc905907a9123a499fb578a1

    • SHA256

      6572e2eac63d7b435fe6d53b4def56b15ddb3f0fe5f946b42f6798a122f687ff

    • SHA512

      f2b22612e1899c8612f3e417fec17b457db8f7f6a8b23ed3f3659d2a6cdc7e983ba870ab68233d71797b1700b7764f949cb61c14d8ed757b7caf4ff948bcdb47

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JBuItR8pz7sH:9cm4FmowdHoS4Bftapz7u

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks