General

  • Target

    8f9e02b011583abd9e934a552224d0d0N.exe

  • Size

    72KB

  • Sample

    240825-h8x31atgkk

  • MD5

    8f9e02b011583abd9e934a552224d0d0

  • SHA1

    cb37fff0c3ca91df4a5042167f19f01768b27d32

  • SHA256

    a0c0134c1663dc7814e4178fea8987327a784dfffd499e2ec442bbbc091f51e9

  • SHA512

    33c629c9f68be9abbd5d405e626d13891779e4acc0920edc8c5573a4529b725ec4fa1ffc812ed4fbfa6de0c26809ff500ca62fe968094fb1ccbd043c1cec6cf1

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIYgC/KSLJUu:ymb3NkkiQ3mdBjFI3eF7

Malware Config

Targets

    • Target

      8f9e02b011583abd9e934a552224d0d0N.exe

    • Size

      72KB

    • MD5

      8f9e02b011583abd9e934a552224d0d0

    • SHA1

      cb37fff0c3ca91df4a5042167f19f01768b27d32

    • SHA256

      a0c0134c1663dc7814e4178fea8987327a784dfffd499e2ec442bbbc091f51e9

    • SHA512

      33c629c9f68be9abbd5d405e626d13891779e4acc0920edc8c5573a4529b725ec4fa1ffc812ed4fbfa6de0c26809ff500ca62fe968094fb1ccbd043c1cec6cf1

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIYgC/KSLJUu:ymb3NkkiQ3mdBjFI3eF7

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks