General

  • Target

    c3f32f78534112015cf4d699f5b04710N.exe

  • Size

    70KB

  • Sample

    240911-1jt9xsvdkc

  • MD5

    c3f32f78534112015cf4d699f5b04710

  • SHA1

    4a74121c472eef06276f865230593a02beb0fc96

  • SHA256

    6429b64f6c646bd62be3c16f90547fd09697f52db30ba13ba606592e01660af8

  • SHA512

    bd16b68dbf9d8301aaf05da86da21f10daad4d3b7520a0bae4ebc3e4642c5d015156b9cef41e2a62eedcf4ec33cebe091d309d16f138ecf8bdbaa7d737029453

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfjR:ymb3NkkiQ3mdBjFI4Vh

Malware Config

Targets

    • Target

      c3f32f78534112015cf4d699f5b04710N.exe

    • Size

      70KB

    • MD5

      c3f32f78534112015cf4d699f5b04710

    • SHA1

      4a74121c472eef06276f865230593a02beb0fc96

    • SHA256

      6429b64f6c646bd62be3c16f90547fd09697f52db30ba13ba606592e01660af8

    • SHA512

      bd16b68dbf9d8301aaf05da86da21f10daad4d3b7520a0bae4ebc3e4642c5d015156b9cef41e2a62eedcf4ec33cebe091d309d16f138ecf8bdbaa7d737029453

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIb0z6MTSqfjR:ymb3NkkiQ3mdBjFI4Vh

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks