General

  • Target

    60907b0127ea100e38e0a4c267256cc5f7548ef0196f32fcfc200eec62df175c

  • Size

    1.3MB

  • Sample

    241110-htdqtavnej

  • MD5

    dbb2431ad92943b6bb0f967c4c41ad79

  • SHA1

    f8eacafe0609fa5a101955085f11466f8ef82f30

  • SHA256

    60907b0127ea100e38e0a4c267256cc5f7548ef0196f32fcfc200eec62df175c

  • SHA512

    d8a38e6271ac5a5ec6ec9fd322eb5491ae1e95a2af647641f1b716ff68287256a032a34c7500399ecf6234bba76401410accd8dbee998283d0ca101774d5d2e2

  • SSDEEP

    24576:FHv2XRhUARvMpkFx9CwiOUb4P4b+kK4RofU9Jj6oSutcXgiotGCM0/SXfZ:FHOXzRvOix9CwiOUMA+kKDfU9BdSuKfb

Malware Config

Targets

    • Target

      60907b0127ea100e38e0a4c267256cc5f7548ef0196f32fcfc200eec62df175c

    • Size

      1.3MB

    • MD5

      dbb2431ad92943b6bb0f967c4c41ad79

    • SHA1

      f8eacafe0609fa5a101955085f11466f8ef82f30

    • SHA256

      60907b0127ea100e38e0a4c267256cc5f7548ef0196f32fcfc200eec62df175c

    • SHA512

      d8a38e6271ac5a5ec6ec9fd322eb5491ae1e95a2af647641f1b716ff68287256a032a34c7500399ecf6234bba76401410accd8dbee998283d0ca101774d5d2e2

    • SSDEEP

      24576:FHv2XRhUARvMpkFx9CwiOUb4P4b+kK4RofU9Jj6oSutcXgiotGCM0/SXfZ:FHOXzRvOix9CwiOUMA+kKDfU9BdSuKfb

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks