General

  • Target

    03c7b301834935b1da51d7adc55eae7f7c7b74031710d5a11561406cc1fd0180N

  • Size

    58KB

  • Sample

    241018-1x5ykssfjq

  • MD5

    3f0399cdca32d4b2ffb785e0188d7460

  • SHA1

    f583875732d7cdc66a7da9bb56ef747839cd8dfc

  • SHA256

    03c7b301834935b1da51d7adc55eae7f7c7b74031710d5a11561406cc1fd0180

  • SHA512

    3f0890f4dfd0f9d4982d5acffae134b92b15cab9005504da3c853a4816a93b5d0874795728217a5d9c00f94535d0b02d4f6f61c316a9bb7fc5689d87bab3842d

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI/RtoNWT:ymb3NkkiQ3mdBjFI/k0

Malware Config

Targets

    • Target

      03c7b301834935b1da51d7adc55eae7f7c7b74031710d5a11561406cc1fd0180N

    • Size

      58KB

    • MD5

      3f0399cdca32d4b2ffb785e0188d7460

    • SHA1

      f583875732d7cdc66a7da9bb56ef747839cd8dfc

    • SHA256

      03c7b301834935b1da51d7adc55eae7f7c7b74031710d5a11561406cc1fd0180

    • SHA512

      3f0890f4dfd0f9d4982d5acffae134b92b15cab9005504da3c853a4816a93b5d0874795728217a5d9c00f94535d0b02d4f6f61c316a9bb7fc5689d87bab3842d

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI/RtoNWT:ymb3NkkiQ3mdBjFI/k0

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks