General

  • Target

    760e36f111546b72c64c0b03a61ea79bc79861c62df2fbff68ff19a1d563f696N

  • Size

    465KB

  • Sample

    240929-3xlaaawhkn

  • MD5

    b338a24b1ed173de3b8a82036407eba0

  • SHA1

    8b17a4757a2267fa7819547fc53742c912010265

  • SHA256

    760e36f111546b72c64c0b03a61ea79bc79861c62df2fbff68ff19a1d563f696

  • SHA512

    3027bdbc48f108194ba7f9f1fd8bf8cb98530a03a4c9c0f2277a5c19412a0f4698e821ef0a0cc649f60e7843948b731916b6583859f1d32ff8676d7cadfea925

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwT+aZKl7pg1c:q7Tc2NYHUrAwT+OKLSc

Malware Config

Targets

    • Target

      760e36f111546b72c64c0b03a61ea79bc79861c62df2fbff68ff19a1d563f696N

    • Size

      465KB

    • MD5

      b338a24b1ed173de3b8a82036407eba0

    • SHA1

      8b17a4757a2267fa7819547fc53742c912010265

    • SHA256

      760e36f111546b72c64c0b03a61ea79bc79861c62df2fbff68ff19a1d563f696

    • SHA512

      3027bdbc48f108194ba7f9f1fd8bf8cb98530a03a4c9c0f2277a5c19412a0f4698e821ef0a0cc649f60e7843948b731916b6583859f1d32ff8676d7cadfea925

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwT+aZKl7pg1c:q7Tc2NYHUrAwT+OKLSc

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks