General

  • Target

    de2d3f08060ee9d5b08416804098a6f0N.exe

  • Size

    90KB

  • Sample

    240820-r648zaxgpc

  • MD5

    de2d3f08060ee9d5b08416804098a6f0

  • SHA1

    3ef13846f34c793f5da080316e13fe1ddb6a1daf

  • SHA256

    5076c68d8bbbbfa08a52f272c93433f95a5c783f00944e3a5bc5da1aa5fc1538

  • SHA512

    2108b7d44c51e26e17d04925193854f448718aeb265f9ea9c6707817452920226c05918cd2e3488eb37021a2de6340bcfdddeda176ce62a343669e717ee16b3b

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2iJvRirE0DmmdL2jqWkBY:ymb3NkkiQ3mdBjF+3TU2iBRioSumWS1m

Malware Config

Targets

    • Target

      de2d3f08060ee9d5b08416804098a6f0N.exe

    • Size

      90KB

    • MD5

      de2d3f08060ee9d5b08416804098a6f0

    • SHA1

      3ef13846f34c793f5da080316e13fe1ddb6a1daf

    • SHA256

      5076c68d8bbbbfa08a52f272c93433f95a5c783f00944e3a5bc5da1aa5fc1538

    • SHA512

      2108b7d44c51e26e17d04925193854f448718aeb265f9ea9c6707817452920226c05918cd2e3488eb37021a2de6340bcfdddeda176ce62a343669e717ee16b3b

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2iJvRirE0DmmdL2jqWkBY:ymb3NkkiQ3mdBjF+3TU2iBRioSumWS1m

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks