General

  • Target

    50ffc3998883d6c4668bf61dbf4ba69a9600947df991802d3f153ac8ba922b40

  • Size

    139KB

  • Sample

    240824-2gstravemj

  • MD5

    266e571a09d1db9343beb83ef4c52f32

  • SHA1

    dd99b22640cee5d33fc25c1785dbe0fd333ce0eb

  • SHA256

    50ffc3998883d6c4668bf61dbf4ba69a9600947df991802d3f153ac8ba922b40

  • SHA512

    353d865a149096a7503a413b2d55685b2d5b0dfbb6e5ebda176f62349d81f12a16e4a8a057050936447bf382b3d96f086ac36f51878ffee1c7ada562ced8dd27

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFWXkj7afoHVpx+dGoH/LE:n3C9BRW0j/1px+dGkQ

Malware Config

Targets

    • Target

      50ffc3998883d6c4668bf61dbf4ba69a9600947df991802d3f153ac8ba922b40

    • Size

      139KB

    • MD5

      266e571a09d1db9343beb83ef4c52f32

    • SHA1

      dd99b22640cee5d33fc25c1785dbe0fd333ce0eb

    • SHA256

      50ffc3998883d6c4668bf61dbf4ba69a9600947df991802d3f153ac8ba922b40

    • SHA512

      353d865a149096a7503a413b2d55685b2d5b0dfbb6e5ebda176f62349d81f12a16e4a8a057050936447bf382b3d96f086ac36f51878ffee1c7ada562ced8dd27

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFWXkj7afoHVpx+dGoH/LE:n3C9BRW0j/1px+dGkQ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks