General

  • Target

    6ae9766830fef266efdc6f2f8962bb50N.exe

  • Size

    80KB

  • Sample

    240722-gfq9ba1gjl

  • MD5

    6ae9766830fef266efdc6f2f8962bb50

  • SHA1

    e003d71ccf03afdce7e56cd817bcd28cc7c8b1ca

  • SHA256

    36c85fd926e64a9c97c89c621f26df4255f482354142927232a28e988744c239

  • SHA512

    e61d2366dd2accfee1d7554d94f0cb2dce61e2888182c0651802f33f2fb55bb027d4bf797379f3d49311e88c8fb111b16e3cc9e3c206db741504f58f2d61f9d0

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIrmCeRMKeWqNSZevn2V:ymb3NkkiQ3mdBjFIjek5Vv2V

Malware Config

Targets

    • Target

      6ae9766830fef266efdc6f2f8962bb50N.exe

    • Size

      80KB

    • MD5

      6ae9766830fef266efdc6f2f8962bb50

    • SHA1

      e003d71ccf03afdce7e56cd817bcd28cc7c8b1ca

    • SHA256

      36c85fd926e64a9c97c89c621f26df4255f482354142927232a28e988744c239

    • SHA512

      e61d2366dd2accfee1d7554d94f0cb2dce61e2888182c0651802f33f2fb55bb027d4bf797379f3d49311e88c8fb111b16e3cc9e3c206db741504f58f2d61f9d0

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIrmCeRMKeWqNSZevn2V:ymb3NkkiQ3mdBjFIjek5Vv2V

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks