General

  • Target

    a8c920e8810098bfbc3f5f3a25757660N

  • Size

    500KB

  • Sample

    240911-y58cka1dkl

  • MD5

    a8c920e8810098bfbc3f5f3a25757660

  • SHA1

    2231c8ccd0e037fcdaf0993359314dea0157e1e7

  • SHA256

    179bee3d233486f4c72d51e3561baf727c05479f21e226a039856db2efaaad41

  • SHA512

    65996ebc4fe523483588b28b86eb6c28eb4255a237c99628981cf400f3aab5a5310b5a3426973aae14152c2e51a36edd181c056a5dbae2ff3aca01bd7ea7e11c

  • SSDEEP

    12288:S4wFHoSyoS3ebeFmFVvlrmwcT4wpteFmFTxZ:0KFmFVtrRcFEFmFL

Malware Config

Targets

    • Target

      a8c920e8810098bfbc3f5f3a25757660N

    • Size

      500KB

    • MD5

      a8c920e8810098bfbc3f5f3a25757660

    • SHA1

      2231c8ccd0e037fcdaf0993359314dea0157e1e7

    • SHA256

      179bee3d233486f4c72d51e3561baf727c05479f21e226a039856db2efaaad41

    • SHA512

      65996ebc4fe523483588b28b86eb6c28eb4255a237c99628981cf400f3aab5a5310b5a3426973aae14152c2e51a36edd181c056a5dbae2ff3aca01bd7ea7e11c

    • SSDEEP

      12288:S4wFHoSyoS3ebeFmFVvlrmwcT4wpteFmFTxZ:0KFmFVtrRcFEFmFL

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks