General

  • Target

    6ab90e2698d4bd94d1583ef19e18cd90N.exe

  • Size

    78KB

  • Sample

    240726-edjqcaxgmh

  • MD5

    6ab90e2698d4bd94d1583ef19e18cd90

  • SHA1

    5cdef872df1a57501a9cbaf8f98b69e579a9562a

  • SHA256

    38cb86818713aff3181c7e638389a124bd84b50c6df901333316624608dca890

  • SHA512

    6b06ed128320972b3b5b532aaa5d45a1b2790d721484def1ee59682add6cf7f66377367b9c5953185879c23542c2479017a55631496fa4b207af1f797fa7cdcf

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5ZzVU:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCZU

Malware Config

Targets

    • Target

      6ab90e2698d4bd94d1583ef19e18cd90N.exe

    • Size

      78KB

    • MD5

      6ab90e2698d4bd94d1583ef19e18cd90

    • SHA1

      5cdef872df1a57501a9cbaf8f98b69e579a9562a

    • SHA256

      38cb86818713aff3181c7e638389a124bd84b50c6df901333316624608dca890

    • SHA512

      6b06ed128320972b3b5b532aaa5d45a1b2790d721484def1ee59682add6cf7f66377367b9c5953185879c23542c2479017a55631496fa4b207af1f797fa7cdcf

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5ZzVU:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCZU

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks