General

  • Target

    75a9edd5cad3bd29576679d5fd584a60N.exe

  • Size

    62KB

  • Sample

    240727-a6awpawaqq

  • MD5

    75a9edd5cad3bd29576679d5fd584a60

  • SHA1

    fcde797ebfd7b98ff74f1903b712484d2634b6e6

  • SHA256

    20825355b77f9d06638b33895b1c589697f52bf4fd8f751a6517ae4408cbc22d

  • SHA512

    1faa6d33b728992e517b81f086b92af98d42fa78abf119259bfffd0c2f10f4fb94e7495c8fb2c5faec79b552189e4c4e9dd8098b237378758deea88548c63f08

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIms94:ymb3NkkiQ3mdBjFIsIFO

Malware Config

Targets

    • Target

      75a9edd5cad3bd29576679d5fd584a60N.exe

    • Size

      62KB

    • MD5

      75a9edd5cad3bd29576679d5fd584a60

    • SHA1

      fcde797ebfd7b98ff74f1903b712484d2634b6e6

    • SHA256

      20825355b77f9d06638b33895b1c589697f52bf4fd8f751a6517ae4408cbc22d

    • SHA512

      1faa6d33b728992e517b81f086b92af98d42fa78abf119259bfffd0c2f10f4fb94e7495c8fb2c5faec79b552189e4c4e9dd8098b237378758deea88548c63f08

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIms94:ymb3NkkiQ3mdBjFIsIFO

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks