General

  • Target

    858c0a3bc241c8f0d9b5b4ec861e5b7a777f34ec3cd248d074383e9005f159f2N

  • Size

    453KB

  • Sample

    241110-d9ektsykev

  • MD5

    ad78e1da9610303a7906dbed360e2500

  • SHA1

    2bbdb054d6d0267027cbec1d817e904320acd5de

  • SHA256

    858c0a3bc241c8f0d9b5b4ec861e5b7a777f34ec3cd248d074383e9005f159f2

  • SHA512

    02bfca34fb7c26ed8c888fdeb22da1624faf863da3f0ddcfa01965f4210ba83062e43854f54b96de6d98d06325425c07d2819bc7cb18eb1e1a92852e9b562876

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeJ:q7Tc2NYHUrAwfMp3CDJ

Malware Config

Targets

    • Target

      858c0a3bc241c8f0d9b5b4ec861e5b7a777f34ec3cd248d074383e9005f159f2N

    • Size

      453KB

    • MD5

      ad78e1da9610303a7906dbed360e2500

    • SHA1

      2bbdb054d6d0267027cbec1d817e904320acd5de

    • SHA256

      858c0a3bc241c8f0d9b5b4ec861e5b7a777f34ec3cd248d074383e9005f159f2

    • SHA512

      02bfca34fb7c26ed8c888fdeb22da1624faf863da3f0ddcfa01965f4210ba83062e43854f54b96de6d98d06325425c07d2819bc7cb18eb1e1a92852e9b562876

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeJ:q7Tc2NYHUrAwfMp3CDJ

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks