General

  • Target

    8ac1ad16495beda8738c4b9a5938e2a0N.exe

  • Size

    58KB

  • Sample

    240821-m9bzdavelg

  • MD5

    8ac1ad16495beda8738c4b9a5938e2a0

  • SHA1

    4e95a7e3bdc33b21b3bffe176e31dea163f26b29

  • SHA256

    f6dde091806c8e2c73bd1fb198615c6cb9fb1ab46668d9f4147d2256baa0eace

  • SHA512

    2c313950783354f30399e3151949a22711981d9ffee467a530ade6de35351339b9cf6201830b97605e3948de1a984bd95912fb38eb19f5cac6e8f415ef9ef22e

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAw:ymb3NkkiQ3mdBjFoh

Malware Config

Targets

    • Target

      8ac1ad16495beda8738c4b9a5938e2a0N.exe

    • Size

      58KB

    • MD5

      8ac1ad16495beda8738c4b9a5938e2a0

    • SHA1

      4e95a7e3bdc33b21b3bffe176e31dea163f26b29

    • SHA256

      f6dde091806c8e2c73bd1fb198615c6cb9fb1ab46668d9f4147d2256baa0eace

    • SHA512

      2c313950783354f30399e3151949a22711981d9ffee467a530ade6de35351339b9cf6201830b97605e3948de1a984bd95912fb38eb19f5cac6e8f415ef9ef22e

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAw:ymb3NkkiQ3mdBjFoh

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks