General

  • Target

    76e11d4219ab9a3d8f398ff9c572e090N.exe

  • Size

    374KB

  • Sample

    240824-nwb8naybnc

  • MD5

    76e11d4219ab9a3d8f398ff9c572e090

  • SHA1

    826bce6409af8a03af622db3fb4b7f41e44e37ef

  • SHA256

    cd5af6f24985fc833f968dbe3a75cf5d9703fc187ee3231103e9c1de9a95c1e4

  • SHA512

    30ae83c8d277c7d480b135b96df791d8732711f37559a2cf293ae117dade2f8f8393a2081253d47fc534ca45f7a29e28f4eb8e8f24381ee60675c8ae6a382869

  • SSDEEP

    6144:n3C9BRIG0asYFm71mJl3/X8mak5gNv9rC8IwLaYNUvtTxTKMMi:n3C9uYA7i3/stR9HGYyvtTxTKMf

Malware Config

Targets

    • Target

      76e11d4219ab9a3d8f398ff9c572e090N.exe

    • Size

      374KB

    • MD5

      76e11d4219ab9a3d8f398ff9c572e090

    • SHA1

      826bce6409af8a03af622db3fb4b7f41e44e37ef

    • SHA256

      cd5af6f24985fc833f968dbe3a75cf5d9703fc187ee3231103e9c1de9a95c1e4

    • SHA512

      30ae83c8d277c7d480b135b96df791d8732711f37559a2cf293ae117dade2f8f8393a2081253d47fc534ca45f7a29e28f4eb8e8f24381ee60675c8ae6a382869

    • SSDEEP

      6144:n3C9BRIG0asYFm71mJl3/X8mak5gNv9rC8IwLaYNUvtTxTKMMi:n3C9uYA7i3/stR9HGYyvtTxTKMf

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks