General

  • Target

    7584e2450d5414057b2ad48b9b14e980N.exe

  • Size

    114KB

  • Sample

    240722-hlye9atepj

  • MD5

    7584e2450d5414057b2ad48b9b14e980

  • SHA1

    0b1278070e47ae86deff69f80d1bfee4ef84eef4

  • SHA256

    b9935f2c54a0276c5a90523506890286172fb92b2d8ef2f09d1df9f31ed0b30b

  • SHA512

    0d49e7865233c72d690fbd73c3b9849aee52cb9b5e57e60df60ace448128ddf465e69235d951da1f5dedd4549459f40e70cc47e0b1cf5f4a3c47ed0b75416d37

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73oYUCD7R2F2UVbyy0N5:ymb3NkkiQ3mdBjFo73HUoMsAbrs

Malware Config

Targets

    • Target

      7584e2450d5414057b2ad48b9b14e980N.exe

    • Size

      114KB

    • MD5

      7584e2450d5414057b2ad48b9b14e980

    • SHA1

      0b1278070e47ae86deff69f80d1bfee4ef84eef4

    • SHA256

      b9935f2c54a0276c5a90523506890286172fb92b2d8ef2f09d1df9f31ed0b30b

    • SHA512

      0d49e7865233c72d690fbd73c3b9849aee52cb9b5e57e60df60ace448128ddf465e69235d951da1f5dedd4549459f40e70cc47e0b1cf5f4a3c47ed0b75416d37

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo73oYUCD7R2F2UVbyy0N5:ymb3NkkiQ3mdBjFo73HUoMsAbrs

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks