General

  • Target

    c9b7929a9c9bae13ecd1c9e2ab60de70N

  • Size

    80KB

  • Sample

    240914-dq59favdjh

  • MD5

    c9b7929a9c9bae13ecd1c9e2ab60de70

  • SHA1

    6f5bf391261991565ccfaa9a4bc7e619f0ae23c5

  • SHA256

    3de2cc07b2d5c9400a7d45e6b8fb90deaa4ebb621e548909e538afe8899879d7

  • SHA512

    a49d36cb30865ff44936b18b2b6857cc343bcd67cf32dea2e011d498ecbfca4c9f3c7ca2e87f160913e8dd39c770488ba67785cbafe8f1cc9218d0bd687a1163

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINFE4yeh5:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCu4K5

Malware Config

Targets

    • Target

      c9b7929a9c9bae13ecd1c9e2ab60de70N

    • Size

      80KB

    • MD5

      c9b7929a9c9bae13ecd1c9e2ab60de70

    • SHA1

      6f5bf391261991565ccfaa9a4bc7e619f0ae23c5

    • SHA256

      3de2cc07b2d5c9400a7d45e6b8fb90deaa4ebb621e548909e538afe8899879d7

    • SHA512

      a49d36cb30865ff44936b18b2b6857cc343bcd67cf32dea2e011d498ecbfca4c9f3c7ca2e87f160913e8dd39c770488ba67785cbafe8f1cc9218d0bd687a1163

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINFE4yeh5:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCu4K5

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks