General

  • Target

    5af78ebe11bdae3da916203d58720f90N

  • Size

    72KB

  • Sample

    240909-2dta4stdjj

  • MD5

    5af78ebe11bdae3da916203d58720f90

  • SHA1

    fd837f24978ab64ffa29544c81094f0de81bb800

  • SHA256

    2b7406f770754e74557776dbd6e2878e25973f534965cfcf4c1ae83295910326

  • SHA512

    e6027ea32bb2d3933c51422e366962af0066c02d6f06ef9dd3d5baa203e83ccc87b0476b355cd9eadc350d340ded9efdefa48d94222fae45ad0abf889b2c4d70

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfjV:ymb3NkkiQ3mdBjFI4VF

Malware Config

Targets

    • Target

      5af78ebe11bdae3da916203d58720f90N

    • Size

      72KB

    • MD5

      5af78ebe11bdae3da916203d58720f90

    • SHA1

      fd837f24978ab64ffa29544c81094f0de81bb800

    • SHA256

      2b7406f770754e74557776dbd6e2878e25973f534965cfcf4c1ae83295910326

    • SHA512

      e6027ea32bb2d3933c51422e366962af0066c02d6f06ef9dd3d5baa203e83ccc87b0476b355cd9eadc350d340ded9efdefa48d94222fae45ad0abf889b2c4d70

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfjV:ymb3NkkiQ3mdBjFI4VF

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks