General

  • Target

    a4662540d60131271839b11d09fe2590N.exe

  • Size

    93KB

  • Sample

    240727-hp816ashjj

  • MD5

    a4662540d60131271839b11d09fe2590

  • SHA1

    40d1201d8075c8de9cd60f759e1b93c3d09a7381

  • SHA256

    8d230d52eea4722688ab2599e3a505972ca6be3b7e45f3ae6cb2966a421b2b27

  • SHA512

    47254a219c543ff362f0426e6605a647b4f580268c5af0b5442cac49d90c7a80086d04825cfe461c7ac3f7b2061cfd70c2fad3847e47dc84d332c030a0264151

  • SSDEEP

    1536:xvQBeOGtrYS3srx93UBWfwC6Ggnouy82F13w801ouAsG9ZoPEudJGdXRKXREmXZO:xhOmTsF93UYfwC6GIout03Fv9KdJoQGf

Malware Config

Targets

    • Target

      a4662540d60131271839b11d09fe2590N.exe

    • Size

      93KB

    • MD5

      a4662540d60131271839b11d09fe2590

    • SHA1

      40d1201d8075c8de9cd60f759e1b93c3d09a7381

    • SHA256

      8d230d52eea4722688ab2599e3a505972ca6be3b7e45f3ae6cb2966a421b2b27

    • SHA512

      47254a219c543ff362f0426e6605a647b4f580268c5af0b5442cac49d90c7a80086d04825cfe461c7ac3f7b2061cfd70c2fad3847e47dc84d332c030a0264151

    • SSDEEP

      1536:xvQBeOGtrYS3srx93UBWfwC6Ggnouy82F13w801ouAsG9ZoPEudJGdXRKXREmXZO:xhOmTsF93UYfwC6GIout03Fv9KdJoQGf

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks