General

  • Target

    f89c05d7b0542a45e80fe6a6e21d9000N.exe

  • Size

    374KB

  • Sample

    240823-xghlkasenq

  • MD5

    f89c05d7b0542a45e80fe6a6e21d9000

  • SHA1

    1c6e20bbfbaf248713bc902653b7dd054b83b180

  • SHA256

    f88492e12db0843c06a811659f124cc076c5b89eaa769d4889a353fd014c0524

  • SHA512

    32f20e89c61cda9a5021e6b99adb946e2ded950bd17827e61b6bffd82a0baaeab6f2bc3725f49b130f949ee9d25d28366f1d25b9efc7c1dffb97814db6ccf8eb

  • SSDEEP

    6144:n3C9BRIG0asYFm71mJl3/X8mak5gNv9rC8IwLaYNUvtTxTKMME:n3C9uYA7i3/stR9HGYyvtTxTKMZ

Malware Config

Targets

    • Target

      f89c05d7b0542a45e80fe6a6e21d9000N.exe

    • Size

      374KB

    • MD5

      f89c05d7b0542a45e80fe6a6e21d9000

    • SHA1

      1c6e20bbfbaf248713bc902653b7dd054b83b180

    • SHA256

      f88492e12db0843c06a811659f124cc076c5b89eaa769d4889a353fd014c0524

    • SHA512

      32f20e89c61cda9a5021e6b99adb946e2ded950bd17827e61b6bffd82a0baaeab6f2bc3725f49b130f949ee9d25d28366f1d25b9efc7c1dffb97814db6ccf8eb

    • SSDEEP

      6144:n3C9BRIG0asYFm71mJl3/X8mak5gNv9rC8IwLaYNUvtTxTKMME:n3C9uYA7i3/stR9HGYyvtTxTKMZ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks