General

  • Target

    f9df999443c64ed9d148c8f3cb21403a375373f0bbc8e9162f9213031d1775deN

  • Size

    445KB

  • Sample

    241017-vdnbjaydmj

  • MD5

    fba138788d8671443ac9b7899da1c6d0

  • SHA1

    e774d7e5364759a563b819ab7d3f4dc06f3f0451

  • SHA256

    f9df999443c64ed9d148c8f3cb21403a375373f0bbc8e9162f9213031d1775de

  • SHA512

    f74774acfee06e09bdac9e3a13fdaf8d69c9c1df7be17743ac5447cd3e7836d0739bf9d72b8279368808df3bfd2cb31c97c1f1f76173e29d8d6f2ed7bef81bca

  • SSDEEP

    12288:w4wFHoS9KxbNnidEhjEJd1kNpeUgI95yRoZHVaoJMOxFXnRV4PiGO0hUmH5CJ:kKxbNndhjEJd1kNpeUgI95yRoZHgoJMi

Malware Config

Targets

    • Target

      f9df999443c64ed9d148c8f3cb21403a375373f0bbc8e9162f9213031d1775deN

    • Size

      445KB

    • MD5

      fba138788d8671443ac9b7899da1c6d0

    • SHA1

      e774d7e5364759a563b819ab7d3f4dc06f3f0451

    • SHA256

      f9df999443c64ed9d148c8f3cb21403a375373f0bbc8e9162f9213031d1775de

    • SHA512

      f74774acfee06e09bdac9e3a13fdaf8d69c9c1df7be17743ac5447cd3e7836d0739bf9d72b8279368808df3bfd2cb31c97c1f1f76173e29d8d6f2ed7bef81bca

    • SSDEEP

      12288:w4wFHoS9KxbNnidEhjEJd1kNpeUgI95yRoZHVaoJMOxFXnRV4PiGO0hUmH5CJ:kKxbNndhjEJd1kNpeUgI95yRoZHgoJMi

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks