General

  • Target

    d4db9c85fa9495da6140a0db7178e150N.exe

  • Size

    92KB

  • Sample

    240906-f9pf5szakh

  • MD5

    d4db9c85fa9495da6140a0db7178e150

  • SHA1

    bae87e6faf5f9dee21d621de4ff0133b3e073f77

  • SHA256

    d0d847cc8ffc482f51591448828e86a582c3b534a4fcba641b67b9d28d741ccc

  • SHA512

    7f09682399c5637e9f6404ce9360f6e43f3268a3872a4454780f63e4d36b703ff4c2b0818b350ecfefaa5a4d55f881d8ff2e7ad3fb453ee859b5b7331376a544

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIS7/b9EUeWpEC3alBlwtn8BLn9t:ymb3NkkiQ3mdBjFIi/REUZnKlb94xs

Malware Config

Targets

    • Target

      d4db9c85fa9495da6140a0db7178e150N.exe

    • Size

      92KB

    • MD5

      d4db9c85fa9495da6140a0db7178e150

    • SHA1

      bae87e6faf5f9dee21d621de4ff0133b3e073f77

    • SHA256

      d0d847cc8ffc482f51591448828e86a582c3b534a4fcba641b67b9d28d741ccc

    • SHA512

      7f09682399c5637e9f6404ce9360f6e43f3268a3872a4454780f63e4d36b703ff4c2b0818b350ecfefaa5a4d55f881d8ff2e7ad3fb453ee859b5b7331376a544

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIS7/b9EUeWpEC3alBlwtn8BLn9t:ymb3NkkiQ3mdBjFIi/REUZnKlb94xs

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks