General

  • Target

    3dd8712bf37557db01f0a64c662d1eb2736f72d71d7649acb974edef7f1f4367N

  • Size

    64KB

  • Sample

    241002-wt7wjstcqc

  • MD5

    5b6b03ede6fc7b15cf47c1084dc8b220

  • SHA1

    59120a23ebc9182b9fedf82d2b444e05ab24c96b

  • SHA256

    3dd8712bf37557db01f0a64c662d1eb2736f72d71d7649acb974edef7f1f4367

  • SHA512

    cd6030c220767e49373fd363eb095e584c27ada0b87f005f85a1661a4b771f7f8921bd518d7f5f7acf5e61346841fc3ba19fba5eeb3d8c3d0ac828ccb9d25b72

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yU+kbxig:ymb3NkkiQ3mdBjF0y7kbN

Malware Config

Targets

    • Target

      3dd8712bf37557db01f0a64c662d1eb2736f72d71d7649acb974edef7f1f4367N

    • Size

      64KB

    • MD5

      5b6b03ede6fc7b15cf47c1084dc8b220

    • SHA1

      59120a23ebc9182b9fedf82d2b444e05ab24c96b

    • SHA256

      3dd8712bf37557db01f0a64c662d1eb2736f72d71d7649acb974edef7f1f4367

    • SHA512

      cd6030c220767e49373fd363eb095e584c27ada0b87f005f85a1661a4b771f7f8921bd518d7f5f7acf5e61346841fc3ba19fba5eeb3d8c3d0ac828ccb9d25b72

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND0yU+kbxig:ymb3NkkiQ3mdBjF0y7kbN

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks