General

  • Target

    c6de709f436a31781460b481f89ff98b474b035e83c590f7b7631ac4a8daf313

  • Size

    403KB

  • Sample

    240727-d55apaxfqb

  • MD5

    2d02bbbbee4eca264222060e56c3c259

  • SHA1

    68723c3714360dd47f35aea222acc909562b1369

  • SHA256

    c6de709f436a31781460b481f89ff98b474b035e83c590f7b7631ac4a8daf313

  • SHA512

    1ec90efebf4a0d7f5c6fce19b19b28dbd0598bb265e2f6edf3c19751d3c8ca851603bf2c5ad9cee51ca0f42438743c23b3b0f4ca24fe4ae9e6b4761132a10b83

  • SSDEEP

    6144:Jcm4FmowdHoSEubDcAkOCOu0EajNVBZr6y2WXxLO1UqW9E3N:T4wFHoSEubD2P3N

Malware Config

Targets

    • Target

      c6de709f436a31781460b481f89ff98b474b035e83c590f7b7631ac4a8daf313

    • Size

      403KB

    • MD5

      2d02bbbbee4eca264222060e56c3c259

    • SHA1

      68723c3714360dd47f35aea222acc909562b1369

    • SHA256

      c6de709f436a31781460b481f89ff98b474b035e83c590f7b7631ac4a8daf313

    • SHA512

      1ec90efebf4a0d7f5c6fce19b19b28dbd0598bb265e2f6edf3c19751d3c8ca851603bf2c5ad9cee51ca0f42438743c23b3b0f4ca24fe4ae9e6b4761132a10b83

    • SSDEEP

      6144:Jcm4FmowdHoSEubDcAkOCOu0EajNVBZr6y2WXxLO1UqW9E3N:T4wFHoSEubD2P3N

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks