General

  • Target

    0afc46385ea45ae758a64c70b251161a44116d040bae16af0dccb1b55143e98d

  • Size

    133KB

  • Sample

    240726-sftvzsveml

  • MD5

    befd0f96ef4f1d69d77dd4d6a21bbe5e

  • SHA1

    9361ed7b79788cf399ff053a9a2d222c1e057f76

  • SHA256

    0afc46385ea45ae758a64c70b251161a44116d040bae16af0dccb1b55143e98d

  • SHA512

    a2cdba586993430690202f8f7570fa9f33685ada52d2c377578be0d98e19761eb8ea621a841382643cf42f86faf41dc81bf32d477bc2e42a9f145e06c0afc6f0

  • SSDEEP

    3072:y+uwJ6IZLv+7TnBepQv1uFPWbnumrWLgAN+u070MtVLa/7outJ:yup6vUpQv1eyMNf0dbLajoSJ

Malware Config

Targets

    • Target

      0afc46385ea45ae758a64c70b251161a44116d040bae16af0dccb1b55143e98d

    • Size

      133KB

    • MD5

      befd0f96ef4f1d69d77dd4d6a21bbe5e

    • SHA1

      9361ed7b79788cf399ff053a9a2d222c1e057f76

    • SHA256

      0afc46385ea45ae758a64c70b251161a44116d040bae16af0dccb1b55143e98d

    • SHA512

      a2cdba586993430690202f8f7570fa9f33685ada52d2c377578be0d98e19761eb8ea621a841382643cf42f86faf41dc81bf32d477bc2e42a9f145e06c0afc6f0

    • SSDEEP

      3072:y+uwJ6IZLv+7TnBepQv1uFPWbnumrWLgAN+u070MtVLa/7outJ:yup6vUpQv1eyMNf0dbLajoSJ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks