General

  • Target

    9b3539e2ac6c27eb9cef2729b56860b174f72d6817ebf9eee14f8b5d0f754544N

  • Size

    72KB

  • Sample

    241018-tngfasyakn

  • MD5

    b6d86dcfe7d47193a7f1517565780fe0

  • SHA1

    b822495ffbe9a3f3a50f3c115a49420cd4e090c6

  • SHA256

    9b3539e2ac6c27eb9cef2729b56860b174f72d6817ebf9eee14f8b5d0f754544

  • SHA512

    86cd5fea8f4c330aa218ed67315059791a59ee1fc4a5078c56218728dc1a6d11a09c26c0650400bd6f0463e73e0e7572222c75d726a084b12da6111604246691

  • SSDEEP

    1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+IJPkffW2Vl4zQ3y3:zhOmTsF93UYfwC6GIoutiTm5kfuGC3

Malware Config

Targets

    • Target

      9b3539e2ac6c27eb9cef2729b56860b174f72d6817ebf9eee14f8b5d0f754544N

    • Size

      72KB

    • MD5

      b6d86dcfe7d47193a7f1517565780fe0

    • SHA1

      b822495ffbe9a3f3a50f3c115a49420cd4e090c6

    • SHA256

      9b3539e2ac6c27eb9cef2729b56860b174f72d6817ebf9eee14f8b5d0f754544

    • SHA512

      86cd5fea8f4c330aa218ed67315059791a59ee1fc4a5078c56218728dc1a6d11a09c26c0650400bd6f0463e73e0e7572222c75d726a084b12da6111604246691

    • SSDEEP

      1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+IJPkffW2Vl4zQ3y3:zhOmTsF93UYfwC6GIoutiTm5kfuGC3

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks