General

  • Target

    16661edacddb4bfb6aa5bd10301c5580N

  • Size

    64KB

  • Sample

    240912-e5m7va1fnm

  • MD5

    16661edacddb4bfb6aa5bd10301c5580

  • SHA1

    6f72cf2f5c1d9ad7ddbce3cdd55392c9e0429d30

  • SHA256

    3f04d082c1b822186b37e1340d22184c6099c8e3976ae482b17b1a162403b347

  • SHA512

    5272114d42411e8cdb3558d2ec0d1bb7675d8ccc6632d5962d4f0a9707e4a4d152f997a85608606251a20d40c7a306598256987f47ea9bbd216e8f3e4bbe3090

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yU+kbxiX:ymb3NkkiQ3mdBjF0y7kbA

Malware Config

Targets

    • Target

      16661edacddb4bfb6aa5bd10301c5580N

    • Size

      64KB

    • MD5

      16661edacddb4bfb6aa5bd10301c5580

    • SHA1

      6f72cf2f5c1d9ad7ddbce3cdd55392c9e0429d30

    • SHA256

      3f04d082c1b822186b37e1340d22184c6099c8e3976ae482b17b1a162403b347

    • SHA512

      5272114d42411e8cdb3558d2ec0d1bb7675d8ccc6632d5962d4f0a9707e4a4d152f997a85608606251a20d40c7a306598256987f47ea9bbd216e8f3e4bbe3090

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yU+kbxiX:ymb3NkkiQ3mdBjF0y7kbA

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks