General

  • Target

    139ca89408707530b89dc09c9568b2dcb341d97c1d044cf828339955bf1b521cN

  • Size

    332KB

  • Sample

    241109-vnl68axnax

  • MD5

    bdb4241aad22ab8c3f62d6fbdb636e10

  • SHA1

    93c27eae5873e081307cbfa6ed63ab820132c917

  • SHA256

    139ca89408707530b89dc09c9568b2dcb341d97c1d044cf828339955bf1b521c

  • SHA512

    c0752378fc3bda5ef6d2acc690c9c6057671bcff6234fa8b605be90ae16095b065802548c97261070d30b4208c386c38e1cb9ffffc87438c7cdbd1fd06af4f09

  • SSDEEP

    6144:vcm4FmowdHoStJdJIjaRleL42bL37BoTPkhu9gX5yGsTshQc8R0nxA5ij8+RC7tr:94wFHoStJdSjylh2b77BoTMA9gX59sTj

Malware Config

Targets

    • Target

      139ca89408707530b89dc09c9568b2dcb341d97c1d044cf828339955bf1b521cN

    • Size

      332KB

    • MD5

      bdb4241aad22ab8c3f62d6fbdb636e10

    • SHA1

      93c27eae5873e081307cbfa6ed63ab820132c917

    • SHA256

      139ca89408707530b89dc09c9568b2dcb341d97c1d044cf828339955bf1b521c

    • SHA512

      c0752378fc3bda5ef6d2acc690c9c6057671bcff6234fa8b605be90ae16095b065802548c97261070d30b4208c386c38e1cb9ffffc87438c7cdbd1fd06af4f09

    • SSDEEP

      6144:vcm4FmowdHoStJdJIjaRleL42bL37BoTPkhu9gX5yGsTshQc8R0nxA5ij8+RC7tr:94wFHoStJdSjylh2b77BoTMA9gX59sTj

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks