General

  • Target

    7cc4d833b35a8d28d6ae5968d69105f2b0dea15e7fb0a92f29ec6a849f5e28a1

  • Size

    465KB

  • Sample

    240925-259r6sshpn

  • MD5

    7f054d824a2dad84d18bc7ce54f5cb83

  • SHA1

    a34bcb52041bdb3ffefaf840ec20d6bca245901b

  • SHA256

    7cc4d833b35a8d28d6ae5968d69105f2b0dea15e7fb0a92f29ec6a849f5e28a1

  • SHA512

    5736fdf65c6bd028d8115737242cc388e825c22b356c726b66be6ba1f5b5936c80a2ba60241edc20ab1e1d6e0f7781a204a4d17279cf0357f35f20ac125500d3

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwT+aZKl7pg1N:q7Tc2NYHUrAwT+OKLSN

Malware Config

Targets

    • Target

      7cc4d833b35a8d28d6ae5968d69105f2b0dea15e7fb0a92f29ec6a849f5e28a1

    • Size

      465KB

    • MD5

      7f054d824a2dad84d18bc7ce54f5cb83

    • SHA1

      a34bcb52041bdb3ffefaf840ec20d6bca245901b

    • SHA256

      7cc4d833b35a8d28d6ae5968d69105f2b0dea15e7fb0a92f29ec6a849f5e28a1

    • SHA512

      5736fdf65c6bd028d8115737242cc388e825c22b356c726b66be6ba1f5b5936c80a2ba60241edc20ab1e1d6e0f7781a204a4d17279cf0357f35f20ac125500d3

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwT+aZKl7pg1N:q7Tc2NYHUrAwT+OKLSN

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks