General

  • Target

    6809381156afeb450f60530851c697753136102ecc0d71915b9301dda8abe408N

  • Size

    62KB

  • Sample

    240919-bhy42sshje

  • MD5

    b6c4de73e2e2079bcfb1966400628eb0

  • SHA1

    bab17a1d46e6c61c8dbaf33b90ccf1393e00ff68

  • SHA256

    6809381156afeb450f60530851c697753136102ecc0d71915b9301dda8abe408

  • SHA512

    0bc4c7ce902510ac3c8220a2a35f7009ce32f6fdd4fea1e3657564a256e199e676de01c6f9305ccc4761b184b8c2a1c97ff578e145ec5e3cc4fd1d2be8131971

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIms9H:ymb3NkkiQ3mdBjFIsIFZ

Malware Config

Targets

    • Target

      6809381156afeb450f60530851c697753136102ecc0d71915b9301dda8abe408N

    • Size

      62KB

    • MD5

      b6c4de73e2e2079bcfb1966400628eb0

    • SHA1

      bab17a1d46e6c61c8dbaf33b90ccf1393e00ff68

    • SHA256

      6809381156afeb450f60530851c697753136102ecc0d71915b9301dda8abe408

    • SHA512

      0bc4c7ce902510ac3c8220a2a35f7009ce32f6fdd4fea1e3657564a256e199e676de01c6f9305ccc4761b184b8c2a1c97ff578e145ec5e3cc4fd1d2be8131971

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIms9H:ymb3NkkiQ3mdBjFIsIFZ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks