General

  • Target

    5c405a946ff8990a060b83e49723ac2b462a4a7ea97ce7e0ba44d33a6f09ef2f

  • Size

    125KB

  • Sample

    240722-1wfmaszgma

  • MD5

    37d8ca8eebcc25f5adc0f19dbd95da3c

  • SHA1

    df3c2fafb78ca4babb575c49ccb890214f83810a

  • SHA256

    5c405a946ff8990a060b83e49723ac2b462a4a7ea97ce7e0ba44d33a6f09ef2f

  • SHA512

    a9eb0c6390426f253cdd9702de232682bd753cdf0678ed82d69bbeee1c76d2110fbb36a5f95321447a4ca2ecc52599d049246b7b08da2654b9ed4b5340b9aec5

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JgY0nI5:9cm4FmowdHoS49o+

Malware Config

Targets

    • Target

      5c405a946ff8990a060b83e49723ac2b462a4a7ea97ce7e0ba44d33a6f09ef2f

    • Size

      125KB

    • MD5

      37d8ca8eebcc25f5adc0f19dbd95da3c

    • SHA1

      df3c2fafb78ca4babb575c49ccb890214f83810a

    • SHA256

      5c405a946ff8990a060b83e49723ac2b462a4a7ea97ce7e0ba44d33a6f09ef2f

    • SHA512

      a9eb0c6390426f253cdd9702de232682bd753cdf0678ed82d69bbeee1c76d2110fbb36a5f95321447a4ca2ecc52599d049246b7b08da2654b9ed4b5340b9aec5

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JgY0nI5:9cm4FmowdHoS49o+

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks