General

  • Target

    d92c471a57ebeb596e3a387251e05c40N.exe

  • Size

    964KB

  • Sample

    240825-ebp5cawaln

  • MD5

    d92c471a57ebeb596e3a387251e05c40

  • SHA1

    012bcee24c5a31d04492bf9e7d9f0d30bc9ab264

  • SHA256

    bc305b74f00007fbf6dcd26fc2bfd1ef28d957a6d40a3a69b445b9a22140274c

  • SHA512

    9b89c5f538f801c1fc06bf0548ff8e88cd2a0ccb786f44cdf6e4c432746740b7fb7df1283309bdc64bda64b9dc3a7575279088f1d8c06f95e5981e058a3fd075

  • SSDEEP

    12288:n3C9yMo+S0L9xRnoq7H9xqYL04iVypNKvzcMwdBS3b3aoqYveXVadBlHD+CURPOk:SgD4bhoqLDqYLagB6Wj1+Cym

Malware Config

Targets

    • Target

      d92c471a57ebeb596e3a387251e05c40N.exe

    • Size

      964KB

    • MD5

      d92c471a57ebeb596e3a387251e05c40

    • SHA1

      012bcee24c5a31d04492bf9e7d9f0d30bc9ab264

    • SHA256

      bc305b74f00007fbf6dcd26fc2bfd1ef28d957a6d40a3a69b445b9a22140274c

    • SHA512

      9b89c5f538f801c1fc06bf0548ff8e88cd2a0ccb786f44cdf6e4c432746740b7fb7df1283309bdc64bda64b9dc3a7575279088f1d8c06f95e5981e058a3fd075

    • SSDEEP

      12288:n3C9yMo+S0L9xRnoq7H9xqYL04iVypNKvzcMwdBS3b3aoqYveXVadBlHD+CURPOk:SgD4bhoqLDqYLagB6Wj1+Cym

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks