General

  • Target

    22f783707d24bae412e134cb624eb319db818903d07aefa52f15c20f417aa9d7N

  • Size

    57KB

  • Sample

    240930-3gtxgsthrd

  • MD5

    4098775f9b9365b1f5d44c90feb0e670

  • SHA1

    1c0e2462f9e16a58ac51621e3adf7414ed484e97

  • SHA256

    22f783707d24bae412e134cb624eb319db818903d07aefa52f15c20f417aa9d7

  • SHA512

    1608c28426a32582e190fdbedf95a06b13f607bfa5e21a6229fb5f303442aa9162d7c1aeb257b69d4b7962c483a47b963bd9815b709009077a8720de074095fb

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI/RtoNz:ymb3NkkiQ3mdBjFI/kh

Malware Config

Targets

    • Target

      22f783707d24bae412e134cb624eb319db818903d07aefa52f15c20f417aa9d7N

    • Size

      57KB

    • MD5

      4098775f9b9365b1f5d44c90feb0e670

    • SHA1

      1c0e2462f9e16a58ac51621e3adf7414ed484e97

    • SHA256

      22f783707d24bae412e134cb624eb319db818903d07aefa52f15c20f417aa9d7

    • SHA512

      1608c28426a32582e190fdbedf95a06b13f607bfa5e21a6229fb5f303442aa9162d7c1aeb257b69d4b7962c483a47b963bd9815b709009077a8720de074095fb

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI/RtoNz:ymb3NkkiQ3mdBjFI/kh

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks