General

  • Target

    1aac2d3635a15fb29c5e3e370437bc994975da66a401875c41a6e7c67ac9635c

  • Size

    59KB

  • Sample

    240913-ywf7qawhla

  • MD5

    9941867d92b76b21e94e8fb20083ad81

  • SHA1

    f192f84172694e7c666b3f3e2a4ddd5dd9adffde

  • SHA256

    1aac2d3635a15fb29c5e3e370437bc994975da66a401875c41a6e7c67ac9635c

  • SHA512

    849d658000b3202332dcc5c0dbfdd891b3e482d1461d91825561d0c5e0f3a60ae170cd9fecbcbd0d1806b410406d5a80c7b02c97c287e7a3b9f39c5c154e9c7c

  • SSDEEP

    1536:s0N/1g32QPMi1g731/LiNpG2YoQjS+QfHvM330pYNsnouy8jxmckVPxIiT:s+/1g3VPMrh0pG2Yk+tyYNsoutjockVH

Malware Config

Targets

    • Target

      1aac2d3635a15fb29c5e3e370437bc994975da66a401875c41a6e7c67ac9635c

    • Size

      59KB

    • MD5

      9941867d92b76b21e94e8fb20083ad81

    • SHA1

      f192f84172694e7c666b3f3e2a4ddd5dd9adffde

    • SHA256

      1aac2d3635a15fb29c5e3e370437bc994975da66a401875c41a6e7c67ac9635c

    • SHA512

      849d658000b3202332dcc5c0dbfdd891b3e482d1461d91825561d0c5e0f3a60ae170cd9fecbcbd0d1806b410406d5a80c7b02c97c287e7a3b9f39c5c154e9c7c

    • SSDEEP

      1536:s0N/1g32QPMi1g731/LiNpG2YoQjS+QfHvM330pYNsnouy8jxmckVPxIiT:s+/1g3VPMrh0pG2Yk+tyYNsoutjockVH

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks