General

  • Target

    fbf00f864740fdb9976f3908477d49a0N.exe

  • Size

    82KB

  • Sample

    240906-npzqdatelk

  • MD5

    fbf00f864740fdb9976f3908477d49a0

  • SHA1

    408bae2e147edbfdaa456abc2b14fb6141f9a941

  • SHA256

    b6d058d4e9d28e480b300d0ecdd55320cc6d57b251812569f36c77b649217c56

  • SHA512

    7b3e8354ce7862134a48205a507bc43c5d5c1f23354f6f5122307e7ead1c16c5a33f144fb598dd077f82cf2328c77cb5d2e43d141dac911cb93b14710a096ddc

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89Q3:ymb3NkkiQ3mdBjFIIp9L9QrrA8O

Malware Config

Targets

    • Target

      fbf00f864740fdb9976f3908477d49a0N.exe

    • Size

      82KB

    • MD5

      fbf00f864740fdb9976f3908477d49a0

    • SHA1

      408bae2e147edbfdaa456abc2b14fb6141f9a941

    • SHA256

      b6d058d4e9d28e480b300d0ecdd55320cc6d57b251812569f36c77b649217c56

    • SHA512

      7b3e8354ce7862134a48205a507bc43c5d5c1f23354f6f5122307e7ead1c16c5a33f144fb598dd077f82cf2328c77cb5d2e43d141dac911cb93b14710a096ddc

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89Q3:ymb3NkkiQ3mdBjFIIp9L9QrrA8O

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks