General

  • Target

    a9bbb35f73757a6bc94ce1a311fd474a4ad2f2fe064a4e425fdeec5286fb9466

  • Size

    154KB

  • Sample

    240928-a8q1paybml

  • MD5

    e17ad776a261530d77aa214723d62653

  • SHA1

    e56173252b70ec7b8c271f50f411960562d7a006

  • SHA256

    a9bbb35f73757a6bc94ce1a311fd474a4ad2f2fe064a4e425fdeec5286fb9466

  • SHA512

    d614df96bbf0d29eaae1a899c541c7e7515492661e8831299dc16de36a9cb9c3123ac01adeb0e0e9ad0b510466cb382c9889d438c158430da16f85dfb3d1955f

  • SSDEEP

    3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yL9:ccm4FmowdHoSi9E2

Malware Config

Targets

    • Target

      a9bbb35f73757a6bc94ce1a311fd474a4ad2f2fe064a4e425fdeec5286fb9466

    • Size

      154KB

    • MD5

      e17ad776a261530d77aa214723d62653

    • SHA1

      e56173252b70ec7b8c271f50f411960562d7a006

    • SHA256

      a9bbb35f73757a6bc94ce1a311fd474a4ad2f2fe064a4e425fdeec5286fb9466

    • SHA512

      d614df96bbf0d29eaae1a899c541c7e7515492661e8831299dc16de36a9cb9c3123ac01adeb0e0e9ad0b510466cb382c9889d438c158430da16f85dfb3d1955f

    • SSDEEP

      3072:chOmTsF93UYfwC6GIoutieyhC2lbgGi5yL9:ccm4FmowdHoSi9E2

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks