General

  • Target

    a0fed57364d6b1a9edfa1eeee9462dd9dcb9a02552b7d1276251264c2cf297dd

  • Size

    1022KB

  • Sample

    240907-1d2f2swfjn

  • MD5

    c4cf5ef73a3ca17b193f02957424423d

  • SHA1

    5c0dc0cea5674117516b9be22aa4d8fb97f513eb

  • SHA256

    a0fed57364d6b1a9edfa1eeee9462dd9dcb9a02552b7d1276251264c2cf297dd

  • SHA512

    014fd762c76b2f2bc09385c60589181e72a919c06c19c1572cf8e4c1a7efa359f079fa1877f76dc831739b2775ac6fd95d9386a00a64b9486b11d42c23e78313

  • SSDEEP

    24576:8CQY70aWmbMM6KEUZ2iQ/mg1PR7Af9xu:8ZmUKE6sTAl

Malware Config

Targets

    • Target

      a0fed57364d6b1a9edfa1eeee9462dd9dcb9a02552b7d1276251264c2cf297dd

    • Size

      1022KB

    • MD5

      c4cf5ef73a3ca17b193f02957424423d

    • SHA1

      5c0dc0cea5674117516b9be22aa4d8fb97f513eb

    • SHA256

      a0fed57364d6b1a9edfa1eeee9462dd9dcb9a02552b7d1276251264c2cf297dd

    • SHA512

      014fd762c76b2f2bc09385c60589181e72a919c06c19c1572cf8e4c1a7efa359f079fa1877f76dc831739b2775ac6fd95d9386a00a64b9486b11d42c23e78313

    • SSDEEP

      24576:8CQY70aWmbMM6KEUZ2iQ/mg1PR7Af9xu:8ZmUKE6sTAl

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks