General

  • Target

    91f0ef372d99748d24a4c8abcf6c55705ba37ecae6a3f5a05a277789d85c5689

  • Size

    97KB

  • Sample

    240724-ambnwazgmc

  • MD5

    c8dd2de9de02be15cb92e19c4784696b

  • SHA1

    ec779af1992fb8f8ae339260ea4a7b86752c9623

  • SHA256

    91f0ef372d99748d24a4c8abcf6c55705ba37ecae6a3f5a05a277789d85c5689

  • SHA512

    6a06ed02a504efa443b3da4248faae187a183dd1aa0b75e58ee48a7235afc7fc6143435406401d858cf10a6bddc1f6327915d1693ebee11e45bce492474fa812

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutyaVszyKd+XqQPdf5NS1:9cm4FmowdHoSyAszBd+aQNS1

Malware Config

Targets

    • Target

      91f0ef372d99748d24a4c8abcf6c55705ba37ecae6a3f5a05a277789d85c5689

    • Size

      97KB

    • MD5

      c8dd2de9de02be15cb92e19c4784696b

    • SHA1

      ec779af1992fb8f8ae339260ea4a7b86752c9623

    • SHA256

      91f0ef372d99748d24a4c8abcf6c55705ba37ecae6a3f5a05a277789d85c5689

    • SHA512

      6a06ed02a504efa443b3da4248faae187a183dd1aa0b75e58ee48a7235afc7fc6143435406401d858cf10a6bddc1f6327915d1693ebee11e45bce492474fa812

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutyaVszyKd+XqQPdf5NS1:9cm4FmowdHoSyAszBd+aQNS1

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks