General

  • Target

    25bbf42fe917fd8eb280bf1507396f1f443bfb61e79d88278d4393fa9728c45c

  • Size

    9.8MB

  • Sample

    240824-yjne9sxhll

  • MD5

    0e33f4b5563e13766c80447dbeb4e0c9

  • SHA1

    f1993d86fd0046cd3955a4976b35ee72baa952ae

  • SHA256

    25bbf42fe917fd8eb280bf1507396f1f443bfb61e79d88278d4393fa9728c45c

  • SHA512

    4a1915f1ff7bce0f32a8df93366593b95857800f092a0287fab1e1c4b84d4b025f3f0210cbac7bff5fb9c203d313e3b33b52bb68eaeb949f54b9a24f691c73fa

  • SSDEEP

    196608:sSVCAdJk22ZlBN8bhCgmsrpW9kElNmjpGt37tR/H:sWdJk22ZzGbprAvmjpGtLv/H

Malware Config

Targets

    • Target

      25bbf42fe917fd8eb280bf1507396f1f443bfb61e79d88278d4393fa9728c45c

    • Size

      9.8MB

    • MD5

      0e33f4b5563e13766c80447dbeb4e0c9

    • SHA1

      f1993d86fd0046cd3955a4976b35ee72baa952ae

    • SHA256

      25bbf42fe917fd8eb280bf1507396f1f443bfb61e79d88278d4393fa9728c45c

    • SHA512

      4a1915f1ff7bce0f32a8df93366593b95857800f092a0287fab1e1c4b84d4b025f3f0210cbac7bff5fb9c203d313e3b33b52bb68eaeb949f54b9a24f691c73fa

    • SSDEEP

      196608:sSVCAdJk22ZlBN8bhCgmsrpW9kElNmjpGt37tR/H:sWdJk22ZzGbprAvmjpGtLv/H

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks