General

  • Target

    3879fae6bc4aba7a9ca51d1b92497370N.exe

  • Size

    308KB

  • Sample

    240723-avzexaxbmg

  • MD5

    3879fae6bc4aba7a9ca51d1b92497370

  • SHA1

    19b8d9568420ee400bd15fa2c92a069f02058114

  • SHA256

    bbf995644055c22b851bd9a003574da53117b5308d71a6ee18f72607718621c9

  • SHA512

    c4b936077de5f86d1a95ac822dbd01704993f9f75d4cfed4009e2d1abb962bbcf268c72a61f0079aebd8eef15421df1442fe663906b6ff8e0884b4680b899710

  • SSDEEP

    6144:n3C9BRo/CH26ZAmaOXicLrnRukAPXt1UP+3OgEbXeTiDSd2vjf:n3C9uUnAvtd3Ogld2vjf

Malware Config

Targets

    • Target

      3879fae6bc4aba7a9ca51d1b92497370N.exe

    • Size

      308KB

    • MD5

      3879fae6bc4aba7a9ca51d1b92497370

    • SHA1

      19b8d9568420ee400bd15fa2c92a069f02058114

    • SHA256

      bbf995644055c22b851bd9a003574da53117b5308d71a6ee18f72607718621c9

    • SHA512

      c4b936077de5f86d1a95ac822dbd01704993f9f75d4cfed4009e2d1abb962bbcf268c72a61f0079aebd8eef15421df1442fe663906b6ff8e0884b4680b899710

    • SSDEEP

      6144:n3C9BRo/CH26ZAmaOXicLrnRukAPXt1UP+3OgEbXeTiDSd2vjf:n3C9uUnAvtd3Ogld2vjf

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks