General

  • Target

    71accf8d6534d10baf7396c89636313f62567e403badb3780021aa7b1b30bfc0N

  • Size

    68KB

  • Sample

    241010-klzpesxgnj

  • MD5

    516d52c58b7fe27be7e542da37208650

  • SHA1

    49e8dd8e025caeae533ec7e11faf68f0dc2e95f8

  • SHA256

    71accf8d6534d10baf7396c89636313f62567e403badb3780021aa7b1b30bfc0

  • SHA512

    db7f48c96dd72eec2983e1e8de42245fe1117da876b40ae81b690e7b74ed3ef89007262f832b11bf921732c9e8c614275047b54aee60c4eab92cfa2bb23cb276

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI9L27B5Qcs:ymb3NkkiQ3mdBjFI9c+T

Malware Config

Targets

    • Target

      71accf8d6534d10baf7396c89636313f62567e403badb3780021aa7b1b30bfc0N

    • Size

      68KB

    • MD5

      516d52c58b7fe27be7e542da37208650

    • SHA1

      49e8dd8e025caeae533ec7e11faf68f0dc2e95f8

    • SHA256

      71accf8d6534d10baf7396c89636313f62567e403badb3780021aa7b1b30bfc0

    • SHA512

      db7f48c96dd72eec2983e1e8de42245fe1117da876b40ae81b690e7b74ed3ef89007262f832b11bf921732c9e8c614275047b54aee60c4eab92cfa2bb23cb276

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI9L27B5Qcs:ymb3NkkiQ3mdBjFI9c+T

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks