General

  • Target

    4eced1cab94f0fe4e430eedc93d42e80N

  • Size

    90KB

  • Sample

    240908-rv3k1a1djj

  • MD5

    4eced1cab94f0fe4e430eedc93d42e80

  • SHA1

    68273cf409d7dd70148b217a7e810179e0284436

  • SHA256

    1febd05af56d54a73ec7b8353ca1e0c39c2c6c72efb8022e435aaa3022126d48

  • SHA512

    c746a1ee2cb765070efdc7f6b562a5c471d210c313ed82bf73dbdb49f5ac5558c9cc79cbd0d13b4c85a1ed0f7fc9ee429a744efa5fbb4761bb709b29fa2070f1

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+mzv7oEzN/8wNXj:ymb3NkkiQ3mdBjF+3TYzvTFD1

Malware Config

Targets

    • Target

      4eced1cab94f0fe4e430eedc93d42e80N

    • Size

      90KB

    • MD5

      4eced1cab94f0fe4e430eedc93d42e80

    • SHA1

      68273cf409d7dd70148b217a7e810179e0284436

    • SHA256

      1febd05af56d54a73ec7b8353ca1e0c39c2c6c72efb8022e435aaa3022126d48

    • SHA512

      c746a1ee2cb765070efdc7f6b562a5c471d210c313ed82bf73dbdb49f5ac5558c9cc79cbd0d13b4c85a1ed0f7fc9ee429a744efa5fbb4761bb709b29fa2070f1

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+mzv7oEzN/8wNXj:ymb3NkkiQ3mdBjF+3TYzvTFD1

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks