General

  • Target

    528657f0c2cd44677465b2e9e62a4ab0N.exe

  • Size

    82KB

  • Sample

    240905-prw8ps1grg

  • MD5

    528657f0c2cd44677465b2e9e62a4ab0

  • SHA1

    2e1bb0041695e6da6146a9baca5bbbb559af8ca5

  • SHA256

    ed6134a2c083d3d1444f6894fd919a7ea3378ee535c33267ee54000c17751efd

  • SHA512

    7637cddbfb01cc582d8fe94be043f5368a6546268bc7dfecb2908c57488b14c86452993f0d4210ede9e3dbf1fc6573703b04eb3e1a29211d717441e5ef8fcf26

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89Qk:ymb3NkkiQ3mdBjFIIp9L9QrrA8H

Malware Config

Targets

    • Target

      528657f0c2cd44677465b2e9e62a4ab0N.exe

    • Size

      82KB

    • MD5

      528657f0c2cd44677465b2e9e62a4ab0

    • SHA1

      2e1bb0041695e6da6146a9baca5bbbb559af8ca5

    • SHA256

      ed6134a2c083d3d1444f6894fd919a7ea3378ee535c33267ee54000c17751efd

    • SHA512

      7637cddbfb01cc582d8fe94be043f5368a6546268bc7dfecb2908c57488b14c86452993f0d4210ede9e3dbf1fc6573703b04eb3e1a29211d717441e5ef8fcf26

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89Qk:ymb3NkkiQ3mdBjFIIp9L9QrrA8H

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks