General

  • Target

    b7d457ac6ce2011890e59f8e4adfa8f0N.exe

  • Size

    93KB

  • Sample

    240726-ljg72atajc

  • MD5

    b7d457ac6ce2011890e59f8e4adfa8f0

  • SHA1

    237d80849ae36d0fac03ea2df64e908d80de02ae

  • SHA256

    9334c039f0d96ea2a57910598669eb6e4d6a24d7240a55c18b54405ddc281b95

  • SHA512

    fbc1bc3f75b325450d2128d6b473bcd5c7b0d1b579f6fac1e0c0c79f580bc2cc28e82b41b320c7fd587ac4a5fbb9aa1651dde685aa0b75973c1248f4a49614dc

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7xCkTsIRwnohZkmr:ymb3NkkiQ3mdBjFo7LAIRUohlr

Malware Config

Targets

    • Target

      b7d457ac6ce2011890e59f8e4adfa8f0N.exe

    • Size

      93KB

    • MD5

      b7d457ac6ce2011890e59f8e4adfa8f0

    • SHA1

      237d80849ae36d0fac03ea2df64e908d80de02ae

    • SHA256

      9334c039f0d96ea2a57910598669eb6e4d6a24d7240a55c18b54405ddc281b95

    • SHA512

      fbc1bc3f75b325450d2128d6b473bcd5c7b0d1b579f6fac1e0c0c79f580bc2cc28e82b41b320c7fd587ac4a5fbb9aa1651dde685aa0b75973c1248f4a49614dc

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDo7xCkTsIRwnohZkmr:ymb3NkkiQ3mdBjFo7LAIRUohlr

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks