General

  • Target

    98482c898807ef474a4921e46c7f6e057ba0d0d4f9d0839e3fb6e57621f4b47e

  • Size

    453KB

  • Sample

    241103-b55kca1emf

  • MD5

    80988a3089241c9f14f4f6dc229256ec

  • SHA1

    fd06af2cc7f27322eed10ac9a352488fff6c1d8d

  • SHA256

    98482c898807ef474a4921e46c7f6e057ba0d0d4f9d0839e3fb6e57621f4b47e

  • SHA512

    c5d9c66a9883676d81f34bc6aeb0eae51ad0513c86b6fb2fcdb5c47ec609e9d2a5d9a1fb698e00b7840cc8b0ad7e7f40c504934feba3999cef17a27382f24d7b

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe1:q7Tc2NYHUrAwfMp3CD1

Malware Config

Targets

    • Target

      98482c898807ef474a4921e46c7f6e057ba0d0d4f9d0839e3fb6e57621f4b47e

    • Size

      453KB

    • MD5

      80988a3089241c9f14f4f6dc229256ec

    • SHA1

      fd06af2cc7f27322eed10ac9a352488fff6c1d8d

    • SHA256

      98482c898807ef474a4921e46c7f6e057ba0d0d4f9d0839e3fb6e57621f4b47e

    • SHA512

      c5d9c66a9883676d81f34bc6aeb0eae51ad0513c86b6fb2fcdb5c47ec609e9d2a5d9a1fb698e00b7840cc8b0ad7e7f40c504934feba3999cef17a27382f24d7b

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe1:q7Tc2NYHUrAwfMp3CD1

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks