General

  • Target

    747463fef1c33c48c90842a734c1a680N.exe

  • Size

    96KB

  • Sample

    240806-htxhxswgpe

  • MD5

    747463fef1c33c48c90842a734c1a680

  • SHA1

    30908b8ffda6701ae42edb5a8a8cda5602fd413e

  • SHA256

    38606289d423565e2e0cc7bc7a8ef6c1a6918373cbf5b6223c0582c8294727af

  • SHA512

    3204bde2010036acdf8a4c321dd45682453a4011dfcb6dbddcdb97593386314de19c928e5a37d70380235e1faed5c73ceb5ace3077230243a68fe4e616a7f1d2

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLpm5DD9WuqXLGnL:9cm4FmowdHoSrNmXQ

Malware Config

Targets

    • Target

      747463fef1c33c48c90842a734c1a680N.exe

    • Size

      96KB

    • MD5

      747463fef1c33c48c90842a734c1a680

    • SHA1

      30908b8ffda6701ae42edb5a8a8cda5602fd413e

    • SHA256

      38606289d423565e2e0cc7bc7a8ef6c1a6918373cbf5b6223c0582c8294727af

    • SHA512

      3204bde2010036acdf8a4c321dd45682453a4011dfcb6dbddcdb97593386314de19c928e5a37d70380235e1faed5c73ceb5ace3077230243a68fe4e616a7f1d2

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLpm5DD9WuqXLGnL:9cm4FmowdHoSrNmXQ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks