General

  • Target

    af1ab0d07f2507e3f82d572e2df2df00N

  • Size

    90KB

  • Sample

    240914-j6zdqathrp

  • MD5

    af1ab0d07f2507e3f82d572e2df2df00

  • SHA1

    c4b2a7405f46cb6f226d62cab5846e468df57a4c

  • SHA256

    50ff29a8c320e9f8a8e928408ffb14a8d4032182016979ad06ae202722801cb9

  • SHA512

    f27424dd35b881bed26b016ec52b1f611138f6c3b1a4816d9f052375721b6dc738daa0959c72e043424580873bcc09a1247c4228d940e60673c8b5647b252675

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2iJvRirE0DmmdL2jqWkBg:ymb3NkkiQ3mdBjF+3TU2iBRioSumWS1e

Malware Config

Targets

    • Target

      af1ab0d07f2507e3f82d572e2df2df00N

    • Size

      90KB

    • MD5

      af1ab0d07f2507e3f82d572e2df2df00

    • SHA1

      c4b2a7405f46cb6f226d62cab5846e468df57a4c

    • SHA256

      50ff29a8c320e9f8a8e928408ffb14a8d4032182016979ad06ae202722801cb9

    • SHA512

      f27424dd35b881bed26b016ec52b1f611138f6c3b1a4816d9f052375721b6dc738daa0959c72e043424580873bcc09a1247c4228d940e60673c8b5647b252675

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+C2iJvRirE0DmmdL2jqWkBg:ymb3NkkiQ3mdBjF+3TU2iBRioSumWS1e

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks