General

  • Target

    09ef099ba4c7ca2701e5d8428607d3d0N.exe

  • Size

    257KB

  • Sample

    240805-z5r61ssdqd

  • MD5

    09ef099ba4c7ca2701e5d8428607d3d0

  • SHA1

    e4a91ecd18149c1f75b9bc1d5cdc27975c35e89c

  • SHA256

    d092cd692c6c4f6317cd0be126a7cbe574c0f4597e9fb6e62eda8667cf8d89d0

  • SHA512

    b9b3ee8a40d0268994335c1f38893d3e1fac9457f2a31740895ccf8740e5fe177a6d61d7dce03683e9c5b9cc2808117898fbce3486b384695517b1cdcffd787c

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmc51+GqekBJCvr6zJBUDMu7rr60UI:n3C9BRIG0asYFm71m8+GdkB9yMu7P

Malware Config

Targets

    • Target

      09ef099ba4c7ca2701e5d8428607d3d0N.exe

    • Size

      257KB

    • MD5

      09ef099ba4c7ca2701e5d8428607d3d0

    • SHA1

      e4a91ecd18149c1f75b9bc1d5cdc27975c35e89c

    • SHA256

      d092cd692c6c4f6317cd0be126a7cbe574c0f4597e9fb6e62eda8667cf8d89d0

    • SHA512

      b9b3ee8a40d0268994335c1f38893d3e1fac9457f2a31740895ccf8740e5fe177a6d61d7dce03683e9c5b9cc2808117898fbce3486b384695517b1cdcffd787c

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmc51+GqekBJCvr6zJBUDMu7rr60UI:n3C9BRIG0asYFm71m8+GdkB9yMu7P

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks