General

  • Target

    cb4d4eaac03c13cf23807ed300616f492cd130e726f9b971824da63a56b025ac

  • Size

    343KB

  • Sample

    240727-eef1vaydjd

  • MD5

    fa0bc367e69dbd0a7e2cfe0532dbc113

  • SHA1

    3fcf2f6cb76b1a4f6fb90edc5a3fcec1d1c5c56b

  • SHA256

    cb4d4eaac03c13cf23807ed300616f492cd130e726f9b971824da63a56b025ac

  • SHA512

    32ec6e08efdaac5f45f91459945644d9f827d9fe6107ddd3b12638faefefde245a3cc7958265fb961f41195855f77a55fd9c3c12ce48dec9be67014626181ac8

  • SSDEEP

    6144:Xcm7ImGddXgYW5fNZWB5hFfci3Add4kGYAs:l7TcbWXZshJX2VGds

Malware Config

Targets

    • Target

      cb4d4eaac03c13cf23807ed300616f492cd130e726f9b971824da63a56b025ac

    • Size

      343KB

    • MD5

      fa0bc367e69dbd0a7e2cfe0532dbc113

    • SHA1

      3fcf2f6cb76b1a4f6fb90edc5a3fcec1d1c5c56b

    • SHA256

      cb4d4eaac03c13cf23807ed300616f492cd130e726f9b971824da63a56b025ac

    • SHA512

      32ec6e08efdaac5f45f91459945644d9f827d9fe6107ddd3b12638faefefde245a3cc7958265fb961f41195855f77a55fd9c3c12ce48dec9be67014626181ac8

    • SSDEEP

      6144:Xcm7ImGddXgYW5fNZWB5hFfci3Add4kGYAs:l7TcbWXZshJX2VGds

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks