General

  • Target

    793385d43fa45ef4d03aa399d702457dc0399aff47d8616060cbf8d4f1efc141

  • Size

    122KB

  • Sample

    240726-3krljasalr

  • MD5

    e7728c67371062c07d43b129e4ef02d9

  • SHA1

    2a6847a0804f338d0ff231390580a25ce5c5bc35

  • SHA256

    793385d43fa45ef4d03aa399d702457dc0399aff47d8616060cbf8d4f1efc141

  • SHA512

    4769debced86f7f10f9bb21ca09211800b10645a2a476854d6e891a3def0e9fc4773b2ebdc624178f0db82dcf066c55d782020e0736c34b6de423d18fb896a86

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73tvn+Yp9gZ6LrZp61G:n3C9BRo7tvnJ9vZ

Malware Config

Targets

    • Target

      793385d43fa45ef4d03aa399d702457dc0399aff47d8616060cbf8d4f1efc141

    • Size

      122KB

    • MD5

      e7728c67371062c07d43b129e4ef02d9

    • SHA1

      2a6847a0804f338d0ff231390580a25ce5c5bc35

    • SHA256

      793385d43fa45ef4d03aa399d702457dc0399aff47d8616060cbf8d4f1efc141

    • SHA512

      4769debced86f7f10f9bb21ca09211800b10645a2a476854d6e891a3def0e9fc4773b2ebdc624178f0db82dcf066c55d782020e0736c34b6de423d18fb896a86

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73tvn+Yp9gZ6LrZp61G:n3C9BRo7tvnJ9vZ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks