General

  • Target

    082ab0bb8f7292b1e2b117d59875f952574c07f8853362625416c5220252b6db

  • Size

    69KB

  • Sample

    241017-wzfz1s1frk

  • MD5

    371a367028b140e10f0b6bde52fe4b21

  • SHA1

    6137db7d50b45f5c6fb8a27e3bfb92dc9e202bdc

  • SHA256

    082ab0bb8f7292b1e2b117d59875f952574c07f8853362625416c5220252b6db

  • SHA512

    284fb1a1eb5c01e1bc49814f0fb035158ee61b5e355f683ea4df45fe9fb02cfead89aa91bdae9ac0e3e192528f484596f80ce452e6865fd284a44218904be022

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIkpi+qjH4l:ymb3NkkiQ3mdBjFIj+qjH4l

Malware Config

Targets

    • Target

      082ab0bb8f7292b1e2b117d59875f952574c07f8853362625416c5220252b6db

    • Size

      69KB

    • MD5

      371a367028b140e10f0b6bde52fe4b21

    • SHA1

      6137db7d50b45f5c6fb8a27e3bfb92dc9e202bdc

    • SHA256

      082ab0bb8f7292b1e2b117d59875f952574c07f8853362625416c5220252b6db

    • SHA512

      284fb1a1eb5c01e1bc49814f0fb035158ee61b5e355f683ea4df45fe9fb02cfead89aa91bdae9ac0e3e192528f484596f80ce452e6865fd284a44218904be022

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIkpi+qjH4l:ymb3NkkiQ3mdBjFIj+qjH4l

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks