General

  • Target

    d15549ef8b64269a560953d4b17885b39691121df1b457c663c1ca6b81b23ad4N

  • Size

    80KB

  • Sample

    241109-se4zkawgrh

  • MD5

    b11c840aa781d6d26d6cec3b69f5f2d0

  • SHA1

    24d96a306fe084cdabc3b23baa2d6050f0fe8f13

  • SHA256

    d15549ef8b64269a560953d4b17885b39691121df1b457c663c1ca6b81b23ad4

  • SHA512

    2ddf8e8f63eaf94d4e89fe6c4342dc401ac28e125fcea986f10c61ff1474dc0f9fb81ae14b61bfe5ddc0b853617f5af4ed9768b4891a05f1c4f8886149a9331a

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINFE4yehE:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCu4KE

Malware Config

Targets

    • Target

      d15549ef8b64269a560953d4b17885b39691121df1b457c663c1ca6b81b23ad4N

    • Size

      80KB

    • MD5

      b11c840aa781d6d26d6cec3b69f5f2d0

    • SHA1

      24d96a306fe084cdabc3b23baa2d6050f0fe8f13

    • SHA256

      d15549ef8b64269a560953d4b17885b39691121df1b457c663c1ca6b81b23ad4

    • SHA512

      2ddf8e8f63eaf94d4e89fe6c4342dc401ac28e125fcea986f10c61ff1474dc0f9fb81ae14b61bfe5ddc0b853617f5af4ed9768b4891a05f1c4f8886149a9331a

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5rINFE4yehE:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCu4KE

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks