General

  • Target

    79aeeb1a95aee6c82d46b538277fce40N.exe

  • Size

    131KB

  • Sample

    240806-je7wsaxcpf

  • MD5

    79aeeb1a95aee6c82d46b538277fce40

  • SHA1

    7986594300b7352a237789257c412eb652aca126

  • SHA256

    863d70ae9dc6ab24b72207dff0ebd9d7dc2350f25ba97cbaf2621c2735f7b45a

  • SHA512

    fe8acca5cc6323b21734188d48e655e0e9c6f904d10d701b6b17fe851808a748bec7894307f6666c0afce6bcb1b00ba1e781caf8b9f9f65aef6ca55b4a9fad9c

  • SSDEEP

    3072:/hOmTsF93UYfwC6GIoutKzdbr9XcMRwk6mNb5TcPeJipRH7s:/cm4FmowdHoSKZf5cX5m7ToI

Malware Config

Targets

    • Target

      79aeeb1a95aee6c82d46b538277fce40N.exe

    • Size

      131KB

    • MD5

      79aeeb1a95aee6c82d46b538277fce40

    • SHA1

      7986594300b7352a237789257c412eb652aca126

    • SHA256

      863d70ae9dc6ab24b72207dff0ebd9d7dc2350f25ba97cbaf2621c2735f7b45a

    • SHA512

      fe8acca5cc6323b21734188d48e655e0e9c6f904d10d701b6b17fe851808a748bec7894307f6666c0afce6bcb1b00ba1e781caf8b9f9f65aef6ca55b4a9fad9c

    • SSDEEP

      3072:/hOmTsF93UYfwC6GIoutKzdbr9XcMRwk6mNb5TcPeJipRH7s:/cm4FmowdHoSKZf5cX5m7ToI

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks