General

  • Target

    ae85323574cd6ac4396e979b11354a0bdb30ecf191902067ca3147bef54dd3fcN.exe

  • Size

    454KB

  • Sample

    241216-x4d7naykev

  • MD5

    e62247797350d0e675fb3a4d390615e0

  • SHA1

    bf1d68597d168b65dc16b7798392cf64dd459ea7

  • SHA256

    ae85323574cd6ac4396e979b11354a0bdb30ecf191902067ca3147bef54dd3fc

  • SHA512

    191609dc5c085a6b414958b2736dc2a9e293fa1a7d1a57b68ce27c00e3fefc9f675f989cd2791362b2635036a0ee7a1a6a6ac16dcde145c4fd242c59198a5033

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeaCi:q7Tc2NYHUrAwfMp3CDri

Malware Config

Targets

    • Target

      ae85323574cd6ac4396e979b11354a0bdb30ecf191902067ca3147bef54dd3fcN.exe

    • Size

      454KB

    • MD5

      e62247797350d0e675fb3a4d390615e0

    • SHA1

      bf1d68597d168b65dc16b7798392cf64dd459ea7

    • SHA256

      ae85323574cd6ac4396e979b11354a0bdb30ecf191902067ca3147bef54dd3fc

    • SHA512

      191609dc5c085a6b414958b2736dc2a9e293fa1a7d1a57b68ce27c00e3fefc9f675f989cd2791362b2635036a0ee7a1a6a6ac16dcde145c4fd242c59198a5033

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeaCi:q7Tc2NYHUrAwfMp3CDri

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks