General

  • Target

    90265bdfd355334ded96bb9963b3baa0N.exe

  • Size

    69KB

  • Sample

    240901-d7hvga1cke

  • MD5

    90265bdfd355334ded96bb9963b3baa0

  • SHA1

    31fc01b80aab3fa677c7909c1aa5131f97eba25b

  • SHA256

    4feda5e2ebc8642dedd6cab2a92f9245bc3734597bdaa16031c929c2c50754ee

  • SHA512

    729a6ffacefbab4887563f535d9561e626617c7c20e3414b61eed0f7ac5002c44194ee89d81d3ff8d4befbdc1832e10a8173851d6c7c87f2f769b89a4da21166

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfUcicH:ymb3NkkiQ3mdBjFI4V4ci4

Malware Config

Targets

    • Target

      90265bdfd355334ded96bb9963b3baa0N.exe

    • Size

      69KB

    • MD5

      90265bdfd355334ded96bb9963b3baa0

    • SHA1

      31fc01b80aab3fa677c7909c1aa5131f97eba25b

    • SHA256

      4feda5e2ebc8642dedd6cab2a92f9245bc3734597bdaa16031c929c2c50754ee

    • SHA512

      729a6ffacefbab4887563f535d9561e626617c7c20e3414b61eed0f7ac5002c44194ee89d81d3ff8d4befbdc1832e10a8173851d6c7c87f2f769b89a4da21166

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfUcicH:ymb3NkkiQ3mdBjFI4V4ci4

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks