General

  • Target

    790e90432053e62f7e41f8f851f36216f2f3af81fd014a26cb22453d7fc76d83

  • Size

    58KB

  • Sample

    240918-2789esycll

  • MD5

    4d01de6bdf1632cb941a3f7519def474

  • SHA1

    e300f449a7e02f34b8309f3cf94e948d3d1d345e

  • SHA256

    790e90432053e62f7e41f8f851f36216f2f3af81fd014a26cb22453d7fc76d83

  • SHA512

    12076f90cde5214ea8948f2d8dd11ef51aa0a68e3dd46578ce74db18ee4ebe4ee68ea988a4ff5a2525785c3b5712539ac9586c16a42f479c81f3903ef41b41ae

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIgTdCo:ymb3NkkiQ3mdBjFIg0o

Malware Config

Targets

    • Target

      790e90432053e62f7e41f8f851f36216f2f3af81fd014a26cb22453d7fc76d83

    • Size

      58KB

    • MD5

      4d01de6bdf1632cb941a3f7519def474

    • SHA1

      e300f449a7e02f34b8309f3cf94e948d3d1d345e

    • SHA256

      790e90432053e62f7e41f8f851f36216f2f3af81fd014a26cb22453d7fc76d83

    • SHA512

      12076f90cde5214ea8948f2d8dd11ef51aa0a68e3dd46578ce74db18ee4ebe4ee68ea988a4ff5a2525785c3b5712539ac9586c16a42f479c81f3903ef41b41ae

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIgTdCo:ymb3NkkiQ3mdBjFIg0o

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks