General

  • Target

    bdbff28d72bd1609e2ee58de7276b650N.exe

  • Size

    369KB

  • Sample

    240726-l213vsthlh

  • MD5

    bdbff28d72bd1609e2ee58de7276b650

  • SHA1

    05fee06bd6600499f1dd2f9f0ace85e4efa77edd

  • SHA256

    7e9169d97366482f060f562196ffe7856218047a1c06546556fd67e7f74f8a5e

  • SHA512

    569acd3343bfe25c742bf955c4b718135163409566954a1d477958ec644f6412260cb264c6ddc37c6165bb35984c0e0fdd18b9135152baa659f9d7e782667a69

  • SSDEEP

    6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0Ibsc:y4wFHoS3eFaKHpNKbbsc

Malware Config

Targets

    • Target

      bdbff28d72bd1609e2ee58de7276b650N.exe

    • Size

      369KB

    • MD5

      bdbff28d72bd1609e2ee58de7276b650

    • SHA1

      05fee06bd6600499f1dd2f9f0ace85e4efa77edd

    • SHA256

      7e9169d97366482f060f562196ffe7856218047a1c06546556fd67e7f74f8a5e

    • SHA512

      569acd3343bfe25c742bf955c4b718135163409566954a1d477958ec644f6412260cb264c6ddc37c6165bb35984c0e0fdd18b9135152baa659f9d7e782667a69

    • SSDEEP

      6144:kcm4FmowdHoSphraHcpOaKHpSwp9OD0Ibsc:y4wFHoS3eFaKHpNKbbsc

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks