General

  • Target

    8bb49241b07303c044251159225afca563688d5cc96c37fee426db5d98fdf06e

  • Size

    463KB

  • Sample

    240727-arftdsvbpl

  • MD5

    d378d61d3a39b37f9799ec093b25d189

  • SHA1

    691061f8fd5b836cf72f17549823d5629e222fba

  • SHA256

    8bb49241b07303c044251159225afca563688d5cc96c37fee426db5d98fdf06e

  • SHA512

    325779a9bc9aca00d8484e5d9557c074ac73f0b8b81f0db65e7138b97575c875f2f1302889889ea316c64a749b39a69c818ee4203dde9c562c8ed452292369ea

  • SSDEEP

    6144:n3C9BRo7tvnJ9Fywhk/TJTaYvMmr3C9BRo7tvnJ9Fywhk/Tku4:n3C9ytvn8whkbJTaFmr3C9ytvn8whkbY

Malware Config

Targets

    • Target

      8bb49241b07303c044251159225afca563688d5cc96c37fee426db5d98fdf06e

    • Size

      463KB

    • MD5

      d378d61d3a39b37f9799ec093b25d189

    • SHA1

      691061f8fd5b836cf72f17549823d5629e222fba

    • SHA256

      8bb49241b07303c044251159225afca563688d5cc96c37fee426db5d98fdf06e

    • SHA512

      325779a9bc9aca00d8484e5d9557c074ac73f0b8b81f0db65e7138b97575c875f2f1302889889ea316c64a749b39a69c818ee4203dde9c562c8ed452292369ea

    • SSDEEP

      6144:n3C9BRo7tvnJ9Fywhk/TJTaYvMmr3C9BRo7tvnJ9Fywhk/Tku4:n3C9ytvn8whkbJTaFmr3C9ytvn8whkbY

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks