General

  • Target

    a2bef85277590b2af80a32fa1b660049da90bd795f46f2787a23363943aa5c70N

  • Size

    80KB

  • Sample

    241018-mrc4qasdpd

  • MD5

    39996a2c3d990a0a8a825f366afc0940

  • SHA1

    8eb02a0390258ae2a60ec9e7f4494bc00378e224

  • SHA256

    a2bef85277590b2af80a32fa1b660049da90bd795f46f2787a23363943aa5c70

  • SHA512

    97c1b103cff5b0f4e215dea94dfb3806ddf36cda50921a72084be30879c44b7eda1844ec5b9bca889c11195e77fc47bf74833acc6e0a94ba324fbb179d513331

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINFE4yep:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCu4Q

Malware Config

Targets

    • Target

      a2bef85277590b2af80a32fa1b660049da90bd795f46f2787a23363943aa5c70N

    • Size

      80KB

    • MD5

      39996a2c3d990a0a8a825f366afc0940

    • SHA1

      8eb02a0390258ae2a60ec9e7f4494bc00378e224

    • SHA256

      a2bef85277590b2af80a32fa1b660049da90bd795f46f2787a23363943aa5c70

    • SHA512

      97c1b103cff5b0f4e215dea94dfb3806ddf36cda50921a72084be30879c44b7eda1844ec5b9bca889c11195e77fc47bf74833acc6e0a94ba324fbb179d513331

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINFE4yep:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCu4Q

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks