General

  • Target

    52969ae6bb0e231698a82404647e4822a1729a2f6ba42ac7c836485a9dff0e70N

  • Size

    66KB

  • Sample

    241018-k8yewayeqe

  • MD5

    e3aad1b7ad77fe987f438d543b878e70

  • SHA1

    916b5e4190e7be3f894a0ef08bd9c5a1c26b302f

  • SHA256

    52969ae6bb0e231698a82404647e4822a1729a2f6ba42ac7c836485a9dff0e70

  • SHA512

    3e43da24660e48b0abaf49a0791dc9e900341de67e16bd40ce27f1fbe2bf80ea522f282dde46a5f80bfe3c1724527cfb286c6d88140dd85f1f5db7970c4ef3df

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI9L27Bq8DG:ymb3NkkiQ3mdBjFI9cqN

Malware Config

Targets

    • Target

      52969ae6bb0e231698a82404647e4822a1729a2f6ba42ac7c836485a9dff0e70N

    • Size

      66KB

    • MD5

      e3aad1b7ad77fe987f438d543b878e70

    • SHA1

      916b5e4190e7be3f894a0ef08bd9c5a1c26b302f

    • SHA256

      52969ae6bb0e231698a82404647e4822a1729a2f6ba42ac7c836485a9dff0e70

    • SHA512

      3e43da24660e48b0abaf49a0791dc9e900341de67e16bd40ce27f1fbe2bf80ea522f282dde46a5f80bfe3c1724527cfb286c6d88140dd85f1f5db7970c4ef3df

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDI9L27Bq8DG:ymb3NkkiQ3mdBjFI9cqN

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks