General

  • Target

    a53a9f125fb936f5b6e20bcef14ea16275d4208d6c16c3bc947978dbe7f31370N

  • Size

    392KB

  • Sample

    241013-1gd5xstgrq

  • MD5

    1f7a325512d6c5f9acd1083bb1d33c30

  • SHA1

    bd78e0c8a7cb37659e1283ad54be47b51d062c8a

  • SHA256

    a53a9f125fb936f5b6e20bcef14ea16275d4208d6c16c3bc947978dbe7f31370

  • SHA512

    1ddf94617f1420e8351af88684fdcfe2f5ad873680f43a44f1bd0b52186e48c384502f6f83a183e7c633e750a0c1b738afbd2c77abcb8ef1ffafdf87daf40b1d

  • SSDEEP

    6144:n3C9BRIG0asYFm71mPfkVB8dKwaO5CVwOwf:n3C9uYA7okVqdKwaO5CVCf

Malware Config

Targets

    • Target

      a53a9f125fb936f5b6e20bcef14ea16275d4208d6c16c3bc947978dbe7f31370N

    • Size

      392KB

    • MD5

      1f7a325512d6c5f9acd1083bb1d33c30

    • SHA1

      bd78e0c8a7cb37659e1283ad54be47b51d062c8a

    • SHA256

      a53a9f125fb936f5b6e20bcef14ea16275d4208d6c16c3bc947978dbe7f31370

    • SHA512

      1ddf94617f1420e8351af88684fdcfe2f5ad873680f43a44f1bd0b52186e48c384502f6f83a183e7c633e750a0c1b738afbd2c77abcb8ef1ffafdf87daf40b1d

    • SSDEEP

      6144:n3C9BRIG0asYFm71mPfkVB8dKwaO5CVwOwf:n3C9uYA7okVqdKwaO5CVCf

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks