General

  • Target

    f00169b0ce81d83fa0d48aa78a0afdff54ab642e7f955140c70269bc9334be2e

  • Size

    590KB

  • Sample

    240727-gdcm5ssgrh

  • MD5

    b99d38b0727cd3aa4179792df9f2aada

  • SHA1

    eceed0c49b6fd652aea1964a521735379dce2013

  • SHA256

    f00169b0ce81d83fa0d48aa78a0afdff54ab642e7f955140c70269bc9334be2e

  • SHA512

    9db1905ac72d899ddcc8eb23560b661e06ee0ec7465b9b991e55bc9b86eeb60706f4635ac3f1fe1082b2c71bc6877bf56b625666fe4a9e2bba7c901af16c1e8d

  • SSDEEP

    6144:n3C9BRIj+ebjcSbcY+CaQdaFOY4iGFYtRdzzoyYxJAyfgayu:n3C9Lebz+xt4vFeFmgayu

Malware Config

Targets

    • Target

      f00169b0ce81d83fa0d48aa78a0afdff54ab642e7f955140c70269bc9334be2e

    • Size

      590KB

    • MD5

      b99d38b0727cd3aa4179792df9f2aada

    • SHA1

      eceed0c49b6fd652aea1964a521735379dce2013

    • SHA256

      f00169b0ce81d83fa0d48aa78a0afdff54ab642e7f955140c70269bc9334be2e

    • SHA512

      9db1905ac72d899ddcc8eb23560b661e06ee0ec7465b9b991e55bc9b86eeb60706f4635ac3f1fe1082b2c71bc6877bf56b625666fe4a9e2bba7c901af16c1e8d

    • SSDEEP

      6144:n3C9BRIj+ebjcSbcY+CaQdaFOY4iGFYtRdzzoyYxJAyfgayu:n3C9Lebz+xt4vFeFmgayu

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks