General

  • Target

    b60d0a845584203a085c47878fd5889ca78da280df15725105a915d48e587871

  • Size

    153KB

  • Sample

    240807-clhf5s1gnf

  • MD5

    b43f71af0144ba4e4a737913bdb07901

  • SHA1

    53c214edaa6f44c21e99b2d24165a341c5dc3b2e

  • SHA256

    b60d0a845584203a085c47878fd5889ca78da280df15725105a915d48e587871

  • SHA512

    1bfbd9f7b1702955d5e6536d95ef6a5d4865d5f4210271a5bce2d0b35cfcaf348b79149b83a779485062283abc510e4935c3091e8868b55f8a39202f095dedf3

  • SSDEEP

    3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLg:ccm4FmowdHoSi9EN

Malware Config

Targets

    • Target

      b60d0a845584203a085c47878fd5889ca78da280df15725105a915d48e587871

    • Size

      153KB

    • MD5

      b43f71af0144ba4e4a737913bdb07901

    • SHA1

      53c214edaa6f44c21e99b2d24165a341c5dc3b2e

    • SHA256

      b60d0a845584203a085c47878fd5889ca78da280df15725105a915d48e587871

    • SHA512

      1bfbd9f7b1702955d5e6536d95ef6a5d4865d5f4210271a5bce2d0b35cfcaf348b79149b83a779485062283abc510e4935c3091e8868b55f8a39202f095dedf3

    • SSDEEP

      3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yLg:ccm4FmowdHoSi9EN

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks