General

  • Target

    db7daee704fcb1f5c09a91eb100edf7487bf2cf7c450f147db7442658a0f693aN

  • Size

    590KB

  • Sample

    240920-15sm8a1clg

  • MD5

    dae53a0132d9fda7de89607ef5351d80

  • SHA1

    f667d33a61c10a433acab11bb7e4717f358d2eac

  • SHA256

    db7daee704fcb1f5c09a91eb100edf7487bf2cf7c450f147db7442658a0f693a

  • SHA512

    2aa4e87015e9b9d28933d913b302c15f99faf20dbba4864102579c38f34116475b4c8b5b2cf73c1d6945cd20fcf72813d4ee2d89209067229a8d15ff7fb4ce16

  • SSDEEP

    6144:n3C9BRIj+ebjcSbcY+CaQdaFOY4iGFYtRdzzoyYxJAyfgayl:n3C9Lebz+xt4vFeFmgayl

Malware Config

Targets

    • Target

      db7daee704fcb1f5c09a91eb100edf7487bf2cf7c450f147db7442658a0f693aN

    • Size

      590KB

    • MD5

      dae53a0132d9fda7de89607ef5351d80

    • SHA1

      f667d33a61c10a433acab11bb7e4717f358d2eac

    • SHA256

      db7daee704fcb1f5c09a91eb100edf7487bf2cf7c450f147db7442658a0f693a

    • SHA512

      2aa4e87015e9b9d28933d913b302c15f99faf20dbba4864102579c38f34116475b4c8b5b2cf73c1d6945cd20fcf72813d4ee2d89209067229a8d15ff7fb4ce16

    • SSDEEP

      6144:n3C9BRIj+ebjcSbcY+CaQdaFOY4iGFYtRdzzoyYxJAyfgayl:n3C9Lebz+xt4vFeFmgayl

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks