General

  • Target

    599b90ea554a9370c7d05fcaf977b643748debf4b6698b9c5aff755c773875fd

  • Size

    843KB

  • Sample

    240828-2bh3cs1flm

  • MD5

    7a8a2d7bf148f4db0227cd77305fc26a

  • SHA1

    c6b1fa489be358a9cbd61515b08d59607f7c3ee3

  • SHA256

    599b90ea554a9370c7d05fcaf977b643748debf4b6698b9c5aff755c773875fd

  • SHA512

    94dc78a0aa1a94bab28d93e184c127735718104619b7c899e8e298c0d22c00cefa807eeb4aa33096d24063d6b7409f9e1f63cf7201fabdd807c6075747d483a2

  • SSDEEP

    24576:Sgdn8whSenedn8whhdn76gdn8whSfgdn8whSzt:TFyVPfA

Malware Config

Targets

    • Target

      599b90ea554a9370c7d05fcaf977b643748debf4b6698b9c5aff755c773875fd

    • Size

      843KB

    • MD5

      7a8a2d7bf148f4db0227cd77305fc26a

    • SHA1

      c6b1fa489be358a9cbd61515b08d59607f7c3ee3

    • SHA256

      599b90ea554a9370c7d05fcaf977b643748debf4b6698b9c5aff755c773875fd

    • SHA512

      94dc78a0aa1a94bab28d93e184c127735718104619b7c899e8e298c0d22c00cefa807eeb4aa33096d24063d6b7409f9e1f63cf7201fabdd807c6075747d483a2

    • SSDEEP

      24576:Sgdn8whSenedn8whhdn76gdn8whSfgdn8whSzt:TFyVPfA

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks