General

  • Target

    f39d1361a8c174cca2588bfca30bc1b0N.exe

  • Size

    65KB

  • Sample

    240905-ctjn6ssdre

  • MD5

    f39d1361a8c174cca2588bfca30bc1b0

  • SHA1

    4ae6ed66173c156c44fe7378b4646fa0411f49da

  • SHA256

    12ce31e2bb90d843f9f4a9d4c545238d89b4e1e6ae3eea95573e9230f1c85726

  • SHA512

    86ed1725505dd75d3033bdfc0348058e3c74465a431abb93a9a12d8809cba73015af1d5a78a9bd08471d8f4c7f3a9fc3e2ab920563a013529543e108beb2520c

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI9L27Bqfj:ymb3NkkiQ3mdBjFI9cqfj

Malware Config

Targets

    • Target

      f39d1361a8c174cca2588bfca30bc1b0N.exe

    • Size

      65KB

    • MD5

      f39d1361a8c174cca2588bfca30bc1b0

    • SHA1

      4ae6ed66173c156c44fe7378b4646fa0411f49da

    • SHA256

      12ce31e2bb90d843f9f4a9d4c545238d89b4e1e6ae3eea95573e9230f1c85726

    • SHA512

      86ed1725505dd75d3033bdfc0348058e3c74465a431abb93a9a12d8809cba73015af1d5a78a9bd08471d8f4c7f3a9fc3e2ab920563a013529543e108beb2520c

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI9L27Bqfj:ymb3NkkiQ3mdBjFI9cqfj

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks