General

  • Target

    df0d466a54af4d856a1647a0aa4927774e7cd274ef2b566ee7b2722cb64cd15fN

  • Size

    452KB

  • Sample

    241017-l9vk2sshqe

  • MD5

    3dd230d8ebfb75f8f51ce44586b59180

  • SHA1

    3e2690ea2996372951f3e05d2b760eb96a8711f2

  • SHA256

    df0d466a54af4d856a1647a0aa4927774e7cd274ef2b566ee7b2722cb64cd15f

  • SHA512

    16a75d590875602b77da6c57a87863fcf36dbb6ea623971d6d776602fd5dc4956c655ff18e4661ff803a2e50d86671d4c9deeb5041085ec7dd132e4b0dd3189b

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe5:q7Tc2NYHUrAwfMp3CD5

Malware Config

Targets

    • Target

      df0d466a54af4d856a1647a0aa4927774e7cd274ef2b566ee7b2722cb64cd15fN

    • Size

      452KB

    • MD5

      3dd230d8ebfb75f8f51ce44586b59180

    • SHA1

      3e2690ea2996372951f3e05d2b760eb96a8711f2

    • SHA256

      df0d466a54af4d856a1647a0aa4927774e7cd274ef2b566ee7b2722cb64cd15f

    • SHA512

      16a75d590875602b77da6c57a87863fcf36dbb6ea623971d6d776602fd5dc4956c655ff18e4661ff803a2e50d86671d4c9deeb5041085ec7dd132e4b0dd3189b

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe5:q7Tc2NYHUrAwfMp3CD5

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks