General

  • Target

    7b63e53c280d1763322945a29893bb80N.exe

  • Size

    82KB

  • Sample

    240907-gwalhayeqa

  • MD5

    7b63e53c280d1763322945a29893bb80

  • SHA1

    62f5466b0239996e593b8a730470e670703d2825

  • SHA256

    de4661141a9a61af2334e3baec54daf76f62b5d4331b4bbc0671dbd4ac609f18

  • SHA512

    0a199c3eb6f497f56673d9169594e48476e0d16ab31014196b38eff38e1c800d4314ab25f28937eb3ec910c81c5eaa2b75b2cedb164b2024dcd6fab21ec0c167

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89QD:ymb3NkkiQ3mdBjFIIp9L9QrrA8I

Malware Config

Targets

    • Target

      7b63e53c280d1763322945a29893bb80N.exe

    • Size

      82KB

    • MD5

      7b63e53c280d1763322945a29893bb80

    • SHA1

      62f5466b0239996e593b8a730470e670703d2825

    • SHA256

      de4661141a9a61af2334e3baec54daf76f62b5d4331b4bbc0671dbd4ac609f18

    • SHA512

      0a199c3eb6f497f56673d9169594e48476e0d16ab31014196b38eff38e1c800d4314ab25f28937eb3ec910c81c5eaa2b75b2cedb164b2024dcd6fab21ec0c167

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89QD:ymb3NkkiQ3mdBjFIIp9L9QrrA8I

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks