General

  • Target

    09c517a89596de398d3df2356f62a5f18eb2d9d329f898d050e69c3ff38a5783

  • Size

    229KB

  • Sample

    240726-w5n8kszenf

  • MD5

    891fb1268aa0a56f4b03f7e73b11abac

  • SHA1

    4e0bb9297b0bed7a87e62bc1c87c14f2143711b1

  • SHA256

    09c517a89596de398d3df2356f62a5f18eb2d9d329f898d050e69c3ff38a5783

  • SHA512

    46f9bfe6adaa6c104f5b82474b0fd0a3b8469984fa17d79179a71376684bc395533c80b2e555d0dfae9edeaffb0e6d948bba656a91bc2fb048e28d128a1d5dbe

  • SSDEEP

    6144:kcm4FmowdHoSphraH+W0+9JGW594s2jULIDNc71E:y4wFHoS3eeWR9JGW594tjU6wq

Malware Config

Targets

    • Target

      09c517a89596de398d3df2356f62a5f18eb2d9d329f898d050e69c3ff38a5783

    • Size

      229KB

    • MD5

      891fb1268aa0a56f4b03f7e73b11abac

    • SHA1

      4e0bb9297b0bed7a87e62bc1c87c14f2143711b1

    • SHA256

      09c517a89596de398d3df2356f62a5f18eb2d9d329f898d050e69c3ff38a5783

    • SHA512

      46f9bfe6adaa6c104f5b82474b0fd0a3b8469984fa17d79179a71376684bc395533c80b2e555d0dfae9edeaffb0e6d948bba656a91bc2fb048e28d128a1d5dbe

    • SSDEEP

      6144:kcm4FmowdHoSphraH+W0+9JGW594s2jULIDNc71E:y4wFHoS3eeWR9JGW594tjU6wq

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks