General

  • Target

    4eadb4cbfeb754da48999166f6af7b897bbf09db6ae9d9f11560f498d8e16884

  • Size

    83KB

  • Sample

    241017-1kkrwa1dnn

  • MD5

    4f4520add5dbe26aed7aa639f1ea439b

  • SHA1

    918c3a4b29c0eff9c218a347e46c72209827ea26

  • SHA256

    4eadb4cbfeb754da48999166f6af7b897bbf09db6ae9d9f11560f498d8e16884

  • SHA512

    35ddf44ca5cc66c693c1f194544c3b3903d4da36d749bb7a7b7f91997f17788dd062b575ac0654687f704caf86e5b20fcf06e9fee92f9fcf4525717b738f4742

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89QO:ymb3NkkiQ3mdBjFIIp9L9QrrA8r

Malware Config

Targets

    • Target

      4eadb4cbfeb754da48999166f6af7b897bbf09db6ae9d9f11560f498d8e16884

    • Size

      83KB

    • MD5

      4f4520add5dbe26aed7aa639f1ea439b

    • SHA1

      918c3a4b29c0eff9c218a347e46c72209827ea26

    • SHA256

      4eadb4cbfeb754da48999166f6af7b897bbf09db6ae9d9f11560f498d8e16884

    • SHA512

      35ddf44ca5cc66c693c1f194544c3b3903d4da36d749bb7a7b7f91997f17788dd062b575ac0654687f704caf86e5b20fcf06e9fee92f9fcf4525717b738f4742

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIIpIo60L9QrrA89QO:ymb3NkkiQ3mdBjFIIp9L9QrrA8r

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks