General

  • Target

    f9d6d75256c5c7514f8abf96b1b11af0331d06a93be70de532dbcdad4f4a04fcN

  • Size

    333KB

  • Sample

    241017-pr4b1s1dkj

  • MD5

    6f15a34ff2f291fbdbb06cda86083060

  • SHA1

    1b9e7e4b967d1791dd54b7b983f9c29b1c30933b

  • SHA256

    f9d6d75256c5c7514f8abf96b1b11af0331d06a93be70de532dbcdad4f4a04fc

  • SHA512

    341ba223867983230a2809cbead9fe7406bd2d6e8c83d228ef565b088f0d0ef3f39adc2c797994929348162ef348f84d904af8ae0b3e0efad2e6fc1249dfed2b

  • SSDEEP

    6144:3cm7ImGddXsJdJIjaRleL42bL37BoTPkhu9gX5yGsTshQc8R0nxA5ij8+RC7tPhq:F7Tc8JdSjylh2b77BoTMA9gX59sTsuTa

Malware Config

Targets

    • Target

      f9d6d75256c5c7514f8abf96b1b11af0331d06a93be70de532dbcdad4f4a04fcN

    • Size

      333KB

    • MD5

      6f15a34ff2f291fbdbb06cda86083060

    • SHA1

      1b9e7e4b967d1791dd54b7b983f9c29b1c30933b

    • SHA256

      f9d6d75256c5c7514f8abf96b1b11af0331d06a93be70de532dbcdad4f4a04fc

    • SHA512

      341ba223867983230a2809cbead9fe7406bd2d6e8c83d228ef565b088f0d0ef3f39adc2c797994929348162ef348f84d904af8ae0b3e0efad2e6fc1249dfed2b

    • SSDEEP

      6144:3cm7ImGddXsJdJIjaRleL42bL37BoTPkhu9gX5yGsTshQc8R0nxA5ij8+RC7tPhq:F7Tc8JdSjylh2b77BoTMA9gX59sTsuTa

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks