General

  • Target

    f9c8deb9495fe54c189e17363281ccc0N

  • Size

    341KB

  • Sample

    240912-hhvvyswfkh

  • MD5

    f9c8deb9495fe54c189e17363281ccc0

  • SHA1

    0c149dcdd09d06d58ed7b11e1884c812fb2fa4e9

  • SHA256

    ecdb5882c3fcaf7a223fa392ed251e0a5186d1058c8cf6d89e7819478f364581

  • SHA512

    2a2b44f405799b28cdf80a875679a5ad398f3462dafaa1c2f63fa7459715817452fd25e0a885f5b2d1dc2fbc3cd0afd604646d627a9aa932a39669bbc8b66bbe

  • SSDEEP

    6144:Kcm4FmowdHoSKAszBd+aQz0192lTk1ycUkpCnAUo0Leu2tZGnOiQ3jiDQIZbdVnG:U4wFHoSK1zBjA892lY196AUo0LX2tZq0

Malware Config

Targets

    • Target

      f9c8deb9495fe54c189e17363281ccc0N

    • Size

      341KB

    • MD5

      f9c8deb9495fe54c189e17363281ccc0

    • SHA1

      0c149dcdd09d06d58ed7b11e1884c812fb2fa4e9

    • SHA256

      ecdb5882c3fcaf7a223fa392ed251e0a5186d1058c8cf6d89e7819478f364581

    • SHA512

      2a2b44f405799b28cdf80a875679a5ad398f3462dafaa1c2f63fa7459715817452fd25e0a885f5b2d1dc2fbc3cd0afd604646d627a9aa932a39669bbc8b66bbe

    • SSDEEP

      6144:Kcm4FmowdHoSKAszBd+aQz0192lTk1ycUkpCnAUo0Leu2tZGnOiQ3jiDQIZbdVnG:U4wFHoSK1zBjA892lY196AUo0LX2tZq0

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks