General

  • Target

    0937b74fb08222473b5e2ea237c882a75f271060aa67cf8e6db2b846a045ce1f

  • Size

    65KB

  • Sample

    240913-zg2qjsxfqj

  • MD5

    5954ec8ead82a35f3a3474f782d292ec

  • SHA1

    88b6b516db2deffa4042cd2d8d180ab537a725c3

  • SHA256

    0937b74fb08222473b5e2ea237c882a75f271060aa67cf8e6db2b846a045ce1f

  • SHA512

    e9fc6f5bdd48b02e3b07e990355d74d5edfa41b4abdbd0b861aad1eb05e8cc0b7084ff8418080c53e41b426fc8ee85c207381a3c3da778bc2bfea0621a75fb46

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI9L27Bqfh:ymb3NkkiQ3mdBjFI9cqfh

Malware Config

Targets

    • Target

      0937b74fb08222473b5e2ea237c882a75f271060aa67cf8e6db2b846a045ce1f

    • Size

      65KB

    • MD5

      5954ec8ead82a35f3a3474f782d292ec

    • SHA1

      88b6b516db2deffa4042cd2d8d180ab537a725c3

    • SHA256

      0937b74fb08222473b5e2ea237c882a75f271060aa67cf8e6db2b846a045ce1f

    • SHA512

      e9fc6f5bdd48b02e3b07e990355d74d5edfa41b4abdbd0b861aad1eb05e8cc0b7084ff8418080c53e41b426fc8ee85c207381a3c3da778bc2bfea0621a75fb46

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI9L27Bqfh:ymb3NkkiQ3mdBjFI9cqfh

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks