General

  • Target

    e5bcef72212f77a5390675d5fc24433af0e682db535969894f967a409eefb8aa.exe

  • Size

    475KB

  • Sample

    240805-ccn8bsxepg

  • MD5

    1f0754128f1fd32781886c3d9e7dc138

  • SHA1

    91170c5fd52ea3b5aa77c4b746d0781b3b195a6d

  • SHA256

    e5bcef72212f77a5390675d5fc24433af0e682db535969894f967a409eefb8aa

  • SHA512

    38ec7ead85e45b82c02420da71f0bed58fc199f658f9b2fb7f0a164f5a26dc4ed9e5de7084e7380a3dcc9bfd3be214fbebb3cfb2a316b1d37cee1acbd4116afa

  • SSDEEP

    12288:EfqiJSvtZDd4YQp7T8BPZ0T9XG1rVBbtpIwaDoS8:GqiWfvQpX8T0h2r/b/IDK

Malware Config

Targets

    • Target

      e5bcef72212f77a5390675d5fc24433af0e682db535969894f967a409eefb8aa.exe

    • Size

      475KB

    • MD5

      1f0754128f1fd32781886c3d9e7dc138

    • SHA1

      91170c5fd52ea3b5aa77c4b746d0781b3b195a6d

    • SHA256

      e5bcef72212f77a5390675d5fc24433af0e682db535969894f967a409eefb8aa

    • SHA512

      38ec7ead85e45b82c02420da71f0bed58fc199f658f9b2fb7f0a164f5a26dc4ed9e5de7084e7380a3dcc9bfd3be214fbebb3cfb2a316b1d37cee1acbd4116afa

    • SSDEEP

      12288:EfqiJSvtZDd4YQp7T8BPZ0T9XG1rVBbtpIwaDoS8:GqiWfvQpX8T0h2r/b/IDK

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks