General

  • Target

    c2af36add3ae14fa6187a90f596c72e0N.exe

  • Size

    74KB

  • Sample

    240905-jnjkjswblj

  • MD5

    c2af36add3ae14fa6187a90f596c72e0

  • SHA1

    4b1ec4dfa0039ab7f58f9123906f71682ca8df02

  • SHA256

    9e7a7ac13ef0a907dc9af295ef395ebc04a116d77a086f6432b5f788e45789e9

  • SHA512

    478423206237a9574aa3e465e54eb18a27d19006152206d04089c3caef5d9981f39732fa24262d3b60707acc0598ea4929439a3b8362a67f17c52ed06a616a8a

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89OGvrFVHmPh:ymb3NkkiQ3mdBjFIvl358nLA89OMFVHi

Malware Config

Targets

    • Target

      c2af36add3ae14fa6187a90f596c72e0N.exe

    • Size

      74KB

    • MD5

      c2af36add3ae14fa6187a90f596c72e0

    • SHA1

      4b1ec4dfa0039ab7f58f9123906f71682ca8df02

    • SHA256

      9e7a7ac13ef0a907dc9af295ef395ebc04a116d77a086f6432b5f788e45789e9

    • SHA512

      478423206237a9574aa3e465e54eb18a27d19006152206d04089c3caef5d9981f39732fa24262d3b60707acc0598ea4929439a3b8362a67f17c52ed06a616a8a

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89OGvrFVHmPh:ymb3NkkiQ3mdBjFIvl358nLA89OMFVHi

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks