General

  • Target

    580c880a21fb211dddcd67f398ba2b60N

  • Size

    76KB

  • Sample

    240911-ehx4jascrc

  • MD5

    580c880a21fb211dddcd67f398ba2b60

  • SHA1

    6feb94444fa88adf51f319fcb933015d1b59a9f9

  • SHA256

    3903e4a2e8a02350381667a11863f2c554f261f0a1ed72aa25fac58630f939ee

  • SHA512

    ff889ef344535a5395d5018ca561942bd7458803285253eb7220fecff877f644b5a414793fff79fc7785d3674de463b91d28698c0ac8b83e4d91078d6acde6a6

  • SSDEEP

    1536:NvQBeOGtrYS3srx93UBWfwC6Ggnouy8KlAXmAXIBG/+WIFuTKLXvCB5yAXNlIQk0:NhOmTsF93UYfwC6GIoutOP/WWGKL/SYu

Malware Config

Targets

    • Target

      580c880a21fb211dddcd67f398ba2b60N

    • Size

      76KB

    • MD5

      580c880a21fb211dddcd67f398ba2b60

    • SHA1

      6feb94444fa88adf51f319fcb933015d1b59a9f9

    • SHA256

      3903e4a2e8a02350381667a11863f2c554f261f0a1ed72aa25fac58630f939ee

    • SHA512

      ff889ef344535a5395d5018ca561942bd7458803285253eb7220fecff877f644b5a414793fff79fc7785d3674de463b91d28698c0ac8b83e4d91078d6acde6a6

    • SSDEEP

      1536:NvQBeOGtrYS3srx93UBWfwC6Ggnouy8KlAXmAXIBG/+WIFuTKLXvCB5yAXNlIQk0:NhOmTsF93UYfwC6GIoutOP/WWGKL/SYu

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks