General

  • Target

    45419a2b1c836cf7420af92256160300N.exe

  • Size

    282KB

  • Sample

    240724-eced8szcrd

  • MD5

    45419a2b1c836cf7420af92256160300

  • SHA1

    71797c68af9ef388779b1b634f27696c210156f7

  • SHA256

    b2db0913cc6b5d83616679cd612134e96dca3468f8438346f39ca4f5e238b05c

  • SHA512

    59ba4038060f274dfff261adffb9efdb1a981bc0e2d7a03413ab5487853879e7719dcd9193725187eb3af7b375e7ab5aa0ef5f3a11bf25332c411d4ff0df84cd

  • SSDEEP

    3072:LhOmTsF93UYfwC6GIoutVwT0JOfZKldUIbvpynrSPu/+//uGK:Lcm4FmowdHoSVwT+aZKlumArSPBXuGK

Malware Config

Targets

    • Target

      45419a2b1c836cf7420af92256160300N.exe

    • Size

      282KB

    • MD5

      45419a2b1c836cf7420af92256160300

    • SHA1

      71797c68af9ef388779b1b634f27696c210156f7

    • SHA256

      b2db0913cc6b5d83616679cd612134e96dca3468f8438346f39ca4f5e238b05c

    • SHA512

      59ba4038060f274dfff261adffb9efdb1a981bc0e2d7a03413ab5487853879e7719dcd9193725187eb3af7b375e7ab5aa0ef5f3a11bf25332c411d4ff0df84cd

    • SSDEEP

      3072:LhOmTsF93UYfwC6GIoutVwT0JOfZKldUIbvpynrSPu/+//uGK:Lcm4FmowdHoSVwT+aZKlumArSPBXuGK

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks