General

  • Target

    700dd625a77d1623149f8cfac90dbfc88fa1939a45bf6f9cb985a62c6df58dd1N

  • Size

    230KB

  • Sample

    240930-ly65psyern

  • MD5

    b1bd00b5511c45c1e0d738cdef43d3c0

  • SHA1

    d29bd0dfbe60c432c7056882ca418e6b0c33f2ce

  • SHA256

    700dd625a77d1623149f8cfac90dbfc88fa1939a45bf6f9cb985a62c6df58dd1

  • SHA512

    cb3305c32cf7f0b68007d75c02996bfd80aa279382e7b8f51fd9b19c4a3b6e21d79fc44723dc53f6b7f775dc0c869e24b83cf0f08e59426a0ad730237310143b

  • SSDEEP

    3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4xLn/c1fP:n3C9BRo7MlrWKo+lxKk1fP

Malware Config

Targets

    • Target

      700dd625a77d1623149f8cfac90dbfc88fa1939a45bf6f9cb985a62c6df58dd1N

    • Size

      230KB

    • MD5

      b1bd00b5511c45c1e0d738cdef43d3c0

    • SHA1

      d29bd0dfbe60c432c7056882ca418e6b0c33f2ce

    • SHA256

      700dd625a77d1623149f8cfac90dbfc88fa1939a45bf6f9cb985a62c6df58dd1

    • SHA512

      cb3305c32cf7f0b68007d75c02996bfd80aa279382e7b8f51fd9b19c4a3b6e21d79fc44723dc53f6b7f775dc0c869e24b83cf0f08e59426a0ad730237310143b

    • SSDEEP

      3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4xLn/c1fP:n3C9BRo7MlrWKo+lxKk1fP

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks