General

  • Target

    02ed33c6a06b61c16200d2ebfc8384f1fbbe62fe4415d327eee386eef31fe494

  • Size

    65KB

  • Sample

    241014-wq897sydnd

  • MD5

    1b2f75386929d2137c3b9722c5b24e10

  • SHA1

    7d0540dca392b8a5114a7a7f6d9d5c5e3b786ceb

  • SHA256

    02ed33c6a06b61c16200d2ebfc8384f1fbbe62fe4415d327eee386eef31fe494

  • SHA512

    f169de28bda7d2feed115367d522074bfc4743495c33a74e55688d1a92de93d3cf21223874674133b7fc019247c4934429b173abfe0124f73838dd7b9757a3fc

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI9L27Bqft7:ymb3NkkiQ3mdBjFI9cqft7

Malware Config

Targets

    • Target

      02ed33c6a06b61c16200d2ebfc8384f1fbbe62fe4415d327eee386eef31fe494

    • Size

      65KB

    • MD5

      1b2f75386929d2137c3b9722c5b24e10

    • SHA1

      7d0540dca392b8a5114a7a7f6d9d5c5e3b786ceb

    • SHA256

      02ed33c6a06b61c16200d2ebfc8384f1fbbe62fe4415d327eee386eef31fe494

    • SHA512

      f169de28bda7d2feed115367d522074bfc4743495c33a74e55688d1a92de93d3cf21223874674133b7fc019247c4934429b173abfe0124f73838dd7b9757a3fc

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI9L27Bqft7:ymb3NkkiQ3mdBjFI9cqft7

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks