General

  • Target

    6c8ed44f9927eca8853fdc07d51edb40N.exe

  • Size

    54KB

  • Sample

    240723-frlbrszcjl

  • MD5

    6c8ed44f9927eca8853fdc07d51edb40

  • SHA1

    8cd576735b902c442dd1e5c580994925e4ca66fb

  • SHA256

    eabd50e083bb483e167e57f10b03129601e32d37bdac1a34309df2b1fcd52931

  • SHA512

    a12649855e8ac6870b0b04521fbc34e2aa4ad7da93246d2f237e376b2c74d022a1382c3a64b7a45a68579b8ca31ef16b95b807086bdbb4ae9f3df85cb58450c8

  • SSDEEP

    1536:fvQBeOGtrYS3srx93UBWfwC6Ggnouy8POtn:fhOmTsF93UYfwC6GIoutPwn

Malware Config

Targets

    • Target

      6c8ed44f9927eca8853fdc07d51edb40N.exe

    • Size

      54KB

    • MD5

      6c8ed44f9927eca8853fdc07d51edb40

    • SHA1

      8cd576735b902c442dd1e5c580994925e4ca66fb

    • SHA256

      eabd50e083bb483e167e57f10b03129601e32d37bdac1a34309df2b1fcd52931

    • SHA512

      a12649855e8ac6870b0b04521fbc34e2aa4ad7da93246d2f237e376b2c74d022a1382c3a64b7a45a68579b8ca31ef16b95b807086bdbb4ae9f3df85cb58450c8

    • SSDEEP

      1536:fvQBeOGtrYS3srx93UBWfwC6Ggnouy8POtn:fhOmTsF93UYfwC6GIoutPwn

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks