General

  • Target

    ec51c66ee6ae5ecdf48ad751c839aa40N

  • Size

    220KB

  • Sample

    240826-bqbzgsycpp

  • MD5

    ec51c66ee6ae5ecdf48ad751c839aa40

  • SHA1

    757f813b57a9f76698f207694ebaa2e8e851f082

  • SHA256

    c3175ae285183cd2de2e1eabde01bfc39cb169c8814d784216c7d9f8ea34ee12

  • SHA512

    c824393943d0332a3e2b581a2e040d8a53f59f921e4965f7e825e2501307748867f93c6a696db88a4c9d6e5e28ebe8ff804b2ba360488ffc13f204e6a8cc8004

  • SSDEEP

    3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JSCCtGkbuy5yLpr1awC6GIoutz5yKdwqBO:9cm4FmowdHoS4WEkMawdHoSbdwqBO

Malware Config

Targets

    • Target

      ec51c66ee6ae5ecdf48ad751c839aa40N

    • Size

      220KB

    • MD5

      ec51c66ee6ae5ecdf48ad751c839aa40

    • SHA1

      757f813b57a9f76698f207694ebaa2e8e851f082

    • SHA256

      c3175ae285183cd2de2e1eabde01bfc39cb169c8814d784216c7d9f8ea34ee12

    • SHA512

      c824393943d0332a3e2b581a2e040d8a53f59f921e4965f7e825e2501307748867f93c6a696db88a4c9d6e5e28ebe8ff804b2ba360488ffc13f204e6a8cc8004

    • SSDEEP

      3072:9hOmTsF93UYfwC6GIoutz5yLpcgDE4JSCCtGkbuy5yLpr1awC6GIoutz5yKdwqBO:9cm4FmowdHoS4WEkMawdHoSbdwqBO

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks