General

  • Target

    0bdd94c7a2add866848b4da948c35dea4aeb8675dc69cbcc7500dfe3a3efc898

  • Size

    343KB

  • Sample

    240824-z3lapa1hlm

  • MD5

    2eea5f929dc560bd11ec586808ec4e3b

  • SHA1

    f417759e4572e2bf842d27144326df8a9f927615

  • SHA256

    0bdd94c7a2add866848b4da948c35dea4aeb8675dc69cbcc7500dfe3a3efc898

  • SHA512

    6a9bf998d7f7dee47db2f6461b7ac1537581cc40634d8207caec8b1236980b26e45cbc190c8c6bdfb9c49d8c4e689cf11aea1157d53d4a8a46721fc305f79e72

  • SSDEEP

    6144:Xcm7ImGddXgYW5fNZWB5hFfci3Add4kGYAa:l7TcbWXZshJX2VGda

Malware Config

Targets

    • Target

      0bdd94c7a2add866848b4da948c35dea4aeb8675dc69cbcc7500dfe3a3efc898

    • Size

      343KB

    • MD5

      2eea5f929dc560bd11ec586808ec4e3b

    • SHA1

      f417759e4572e2bf842d27144326df8a9f927615

    • SHA256

      0bdd94c7a2add866848b4da948c35dea4aeb8675dc69cbcc7500dfe3a3efc898

    • SHA512

      6a9bf998d7f7dee47db2f6461b7ac1537581cc40634d8207caec8b1236980b26e45cbc190c8c6bdfb9c49d8c4e689cf11aea1157d53d4a8a46721fc305f79e72

    • SSDEEP

      6144:Xcm7ImGddXgYW5fNZWB5hFfci3Add4kGYAa:l7TcbWXZshJX2VGda

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks