General

  • Target

    63137ef8bdca2d6ad405ed6116c7adb0N.exe

  • Size

    95KB

  • Sample

    240726-dssq5ataqp

  • MD5

    63137ef8bdca2d6ad405ed6116c7adb0

  • SHA1

    6e0637ef0f4f5c1f952ac97309f69fcc83c4eb24

  • SHA256

    15ee04183b3bab441441e95c9f06d1f71a652145e97e59d59a66b00dfb9ce579

  • SHA512

    e9cb3af4c112a1b6ea6318795ed0742f1acb4972bd8716f6633f88b52ed25e7c6b6dd8d934bad262682bec49ad59fe7d456971b6ae97f17174a8d3eb80feedcc

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIY6StisQlzQoBwbPNHDx3jsyfwM:ymb3NkkiQ3mdBjFIY7is8URxQkwco8rH

Malware Config

Targets

    • Target

      63137ef8bdca2d6ad405ed6116c7adb0N.exe

    • Size

      95KB

    • MD5

      63137ef8bdca2d6ad405ed6116c7adb0

    • SHA1

      6e0637ef0f4f5c1f952ac97309f69fcc83c4eb24

    • SHA256

      15ee04183b3bab441441e95c9f06d1f71a652145e97e59d59a66b00dfb9ce579

    • SHA512

      e9cb3af4c112a1b6ea6318795ed0742f1acb4972bd8716f6633f88b52ed25e7c6b6dd8d934bad262682bec49ad59fe7d456971b6ae97f17174a8d3eb80feedcc

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIY6StisQlzQoBwbPNHDx3jsyfwM:ymb3NkkiQ3mdBjFIY7is8URxQkwco8rH

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks