General

  • Target

    ecc22b1de7db740a10e666b6a158a0a0N.exe

  • Size

    461KB

  • Sample

    240903-q2z8saybkm

  • MD5

    ecc22b1de7db740a10e666b6a158a0a0

  • SHA1

    1e58ab5b8aad18a65f78966a4c1110634d8b3fd6

  • SHA256

    86d806017fbf6eddf086a91bce3f84c5ece32f790e417502ea8a7bc65db0ba95

  • SHA512

    ce03be8862e00bcd7f61f1257f2f38d61a72964a13c88f4944a14bc19088f31c90e9ab2d36f370ee20406da737ed9ed19965f9a7d13a632b193add45dfdbf98f

  • SSDEEP

    3072:PhOm2sI93UufdC67cihfmCiiiXAsACF486jJSp1BxIt0b0lxg34bS/SFCY3JVCbN:Pcm7ImGddXtWrXD486jJq1BStv4Ib1HM

Malware Config

Targets

    • Target

      ecc22b1de7db740a10e666b6a158a0a0N.exe

    • Size

      461KB

    • MD5

      ecc22b1de7db740a10e666b6a158a0a0

    • SHA1

      1e58ab5b8aad18a65f78966a4c1110634d8b3fd6

    • SHA256

      86d806017fbf6eddf086a91bce3f84c5ece32f790e417502ea8a7bc65db0ba95

    • SHA512

      ce03be8862e00bcd7f61f1257f2f38d61a72964a13c88f4944a14bc19088f31c90e9ab2d36f370ee20406da737ed9ed19965f9a7d13a632b193add45dfdbf98f

    • SSDEEP

      3072:PhOm2sI93UufdC67cihfmCiiiXAsACF486jJSp1BxIt0b0lxg34bS/SFCY3JVCbN:Pcm7ImGddXtWrXD486jJq1BStv4Ib1HM

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks