General

  • Target

    f28decfd01e5a933b78aa38532b2ca20N.exe

  • Size

    75KB

  • Sample

    240911-tlpznazcnn

  • MD5

    f28decfd01e5a933b78aa38532b2ca20

  • SHA1

    4e2c4ba123d6a01cb6ac968ff771cc34447c7bc0

  • SHA256

    b82446d90ad4361aa4b75f461a96245ce2511cb991fd9f34f59754ae2ece26e1

  • SHA512

    42646b9e5f8bc7323f4c96f0f2556b9d51cbd591dd04380be6e962cbcef2f4ea5d5b676c219f3ffb496a7e353877fbc0f3fc7790c93fbf6bc5be6d6aeb34c3db

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89OGvrFVHmPf:ymb3NkkiQ3mdBjFIvl358nLA89OMFVH0

Malware Config

Targets

    • Target

      f28decfd01e5a933b78aa38532b2ca20N.exe

    • Size

      75KB

    • MD5

      f28decfd01e5a933b78aa38532b2ca20

    • SHA1

      4e2c4ba123d6a01cb6ac968ff771cc34447c7bc0

    • SHA256

      b82446d90ad4361aa4b75f461a96245ce2511cb991fd9f34f59754ae2ece26e1

    • SHA512

      42646b9e5f8bc7323f4c96f0f2556b9d51cbd591dd04380be6e962cbcef2f4ea5d5b676c219f3ffb496a7e353877fbc0f3fc7790c93fbf6bc5be6d6aeb34c3db

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89OGvrFVHmPf:ymb3NkkiQ3mdBjFIvl358nLA89OMFVH0

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks