General

  • Target

    723805d877fcce8d6d7c06a0423631a0N.exe

  • Size

    371KB

  • Sample

    240727-apl8dsxfle

  • MD5

    723805d877fcce8d6d7c06a0423631a0

  • SHA1

    a0ac920a273fe431546c0f3700dfd226ee831023

  • SHA256

    8ae81b8d146cf3077b9e5155a95672cea8664e0fa6d2ae3c9e2a529340e5c66b

  • SHA512

    342b07cf0814615b801395e4263541a5af3a5adad06fd3252fcd2090de3a67cecfc00bf453b1ff96e497e094cd4118d31720cb60a3218c07fb8415af090d14a0

  • SSDEEP

    6144:n3C9BRIG0asYFm71mPfkVB8dKwaO5CVwb:n3C9uYA7okVqdKwaO5CVi

Malware Config

Targets

    • Target

      723805d877fcce8d6d7c06a0423631a0N.exe

    • Size

      371KB

    • MD5

      723805d877fcce8d6d7c06a0423631a0

    • SHA1

      a0ac920a273fe431546c0f3700dfd226ee831023

    • SHA256

      8ae81b8d146cf3077b9e5155a95672cea8664e0fa6d2ae3c9e2a529340e5c66b

    • SHA512

      342b07cf0814615b801395e4263541a5af3a5adad06fd3252fcd2090de3a67cecfc00bf453b1ff96e497e094cd4118d31720cb60a3218c07fb8415af090d14a0

    • SSDEEP

      6144:n3C9BRIG0asYFm71mPfkVB8dKwaO5CVwb:n3C9uYA7okVqdKwaO5CVi

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks