General

  • Target

    a5b68df54699a5e79c8055bcc740f4c0N.exe

  • Size

    486KB

  • Sample

    240902-k8j79axgre

  • MD5

    a5b68df54699a5e79c8055bcc740f4c0

  • SHA1

    9fdfd3f11e5806ba3c02a69ff9994a4a4416ffd5

  • SHA256

    07f7b4eaf910a946d5feca5715ec46488b0fa47a29fee11aacce2585519cbb9e

  • SHA512

    e4c8a30fc83140027bda28676349cc5d649ff372490acdb59e705463fc1d2a01a0823f7bb533823d0562aa6c6ca95ff96e99008344480617df3ecfc6bf900a1a

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwu1b26X1wjhtSizjnv:q7Tc2NYHUrAwqzcR

Malware Config

Targets

    • Target

      a5b68df54699a5e79c8055bcc740f4c0N.exe

    • Size

      486KB

    • MD5

      a5b68df54699a5e79c8055bcc740f4c0

    • SHA1

      9fdfd3f11e5806ba3c02a69ff9994a4a4416ffd5

    • SHA256

      07f7b4eaf910a946d5feca5715ec46488b0fa47a29fee11aacce2585519cbb9e

    • SHA512

      e4c8a30fc83140027bda28676349cc5d649ff372490acdb59e705463fc1d2a01a0823f7bb533823d0562aa6c6ca95ff96e99008344480617df3ecfc6bf900a1a

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwu1b26X1wjhtSizjnv:q7Tc2NYHUrAwqzcR

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks