General

  • Target

    3e447b612f8c6e89a24802b10631915a604ededf8932e665c574340f17c49031N

  • Size

    452KB

  • Sample

    240921-zjqfasshll

  • MD5

    9258ee0c5df646f0efc06f8f313e0e00

  • SHA1

    877ec4ca9593b79d2b627a431a8ee127f72e9415

  • SHA256

    3e447b612f8c6e89a24802b10631915a604ededf8932e665c574340f17c49031

  • SHA512

    e50510d29fd9a61384aaefad19f28d29869a3df7e3aebe26b03d67b862c39f5c5843ce041d2f57a0f71030ec441e107b6c1ff94c8406c956424ef49a6f60bd57

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeQ:q7Tc2NYHUrAwfMp3CDQ

Malware Config

Targets

    • Target

      3e447b612f8c6e89a24802b10631915a604ededf8932e665c574340f17c49031N

    • Size

      452KB

    • MD5

      9258ee0c5df646f0efc06f8f313e0e00

    • SHA1

      877ec4ca9593b79d2b627a431a8ee127f72e9415

    • SHA256

      3e447b612f8c6e89a24802b10631915a604ededf8932e665c574340f17c49031

    • SHA512

      e50510d29fd9a61384aaefad19f28d29869a3df7e3aebe26b03d67b862c39f5c5843ce041d2f57a0f71030ec441e107b6c1ff94c8406c956424ef49a6f60bd57

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeQ:q7Tc2NYHUrAwfMp3CDQ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks