General

  • Target

    8f17241114bcc7750a42233942a7f9bfa6991ecf203edf496125403d7eac0958N

  • Size

    250KB

  • Sample

    240928-exa8baygrf

  • MD5

    134fec82a29a7110d058e3bb058cf430

  • SHA1

    2eff4898575b65da6aac0e451777b4442f450dd3

  • SHA256

    8f17241114bcc7750a42233942a7f9bfa6991ecf203edf496125403d7eac0958

  • SHA512

    d460a979d6544ae362e740907effca9252bd720076d9d21fb18a532cff63ff338f230cce130db2dcc4d357132087c0de98b9794170add6375c137a9ae144d0f9

  • SSDEEP

    6144:n3C9BRo/AIX27NHWpU00VIxas1oa3YiFRlu:n3C9uD6AUDCa4NYmRU

Malware Config

Targets

    • Target

      8f17241114bcc7750a42233942a7f9bfa6991ecf203edf496125403d7eac0958N

    • Size

      250KB

    • MD5

      134fec82a29a7110d058e3bb058cf430

    • SHA1

      2eff4898575b65da6aac0e451777b4442f450dd3

    • SHA256

      8f17241114bcc7750a42233942a7f9bfa6991ecf203edf496125403d7eac0958

    • SHA512

      d460a979d6544ae362e740907effca9252bd720076d9d21fb18a532cff63ff338f230cce130db2dcc4d357132087c0de98b9794170add6375c137a9ae144d0f9

    • SSDEEP

      6144:n3C9BRo/AIX27NHWpU00VIxas1oa3YiFRlu:n3C9uD6AUDCa4NYmRU

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks