General

  • Target

    be88241065e2c500c6ac285f07c020f59a82343f2e18c01a6ba4628822ef1ce2

  • Size

    70KB

  • Sample

    241110-cnrslaxejg

  • MD5

    757aa8a4915e1a852a520ab5a4b5416d

  • SHA1

    774ecd6d99a022db61d6e1779ef7f2f1855a6012

  • SHA256

    be88241065e2c500c6ac285f07c020f59a82343f2e18c01a6ba4628822ef1ce2

  • SHA512

    5a24ea11fda23b9238d1fb6db4d4e146126336f4c9a7652f856d46d786d7d54977bdb3ccf1ad7ba63b4d95ccfda1eb3c6ab328f520cf954303085bc437c021f9

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIkpi+qjH4e:ymb3NkkiQ3mdBjFIj+qjH4e

Malware Config

Targets

    • Target

      be88241065e2c500c6ac285f07c020f59a82343f2e18c01a6ba4628822ef1ce2

    • Size

      70KB

    • MD5

      757aa8a4915e1a852a520ab5a4b5416d

    • SHA1

      774ecd6d99a022db61d6e1779ef7f2f1855a6012

    • SHA256

      be88241065e2c500c6ac285f07c020f59a82343f2e18c01a6ba4628822ef1ce2

    • SHA512

      5a24ea11fda23b9238d1fb6db4d4e146126336f4c9a7652f856d46d786d7d54977bdb3ccf1ad7ba63b4d95ccfda1eb3c6ab328f520cf954303085bc437c021f9

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIkpi+qjH4e:ymb3NkkiQ3mdBjFIj+qjH4e

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks