General

  • Target

    c7b8ed5ceaf18191492886b8a24bc449f6abe23e826b43cd67c03d253d74f751.exe

  • Size

    347KB

  • Sample

    241218-g5xsdsykeq

  • MD5

    6c3f3d01c703a5c6d1398770e539fc76

  • SHA1

    d925f70adf8bdac2d5eb88346f18cbd00b9d68a4

  • SHA256

    c7b8ed5ceaf18191492886b8a24bc449f6abe23e826b43cd67c03d253d74f751

  • SHA512

    ac19d832f5dcdc2f17da5bfc842c29fca8684d4c7822620859a85ca4ea2614a047f223af8dfdacab6f2188387dbfd8b4b8608169c4ecfbeca530e71d6c94b1bf

  • SSDEEP

    6144:Lcm4FmowdHoSEYW5fNZWB5hFfci3Add4kGYA41:R4wFHoS3WXZshJX2VGd41

Malware Config

Targets

    • Target

      c7b8ed5ceaf18191492886b8a24bc449f6abe23e826b43cd67c03d253d74f751.exe

    • Size

      347KB

    • MD5

      6c3f3d01c703a5c6d1398770e539fc76

    • SHA1

      d925f70adf8bdac2d5eb88346f18cbd00b9d68a4

    • SHA256

      c7b8ed5ceaf18191492886b8a24bc449f6abe23e826b43cd67c03d253d74f751

    • SHA512

      ac19d832f5dcdc2f17da5bfc842c29fca8684d4c7822620859a85ca4ea2614a047f223af8dfdacab6f2188387dbfd8b4b8608169c4ecfbeca530e71d6c94b1bf

    • SSDEEP

      6144:Lcm4FmowdHoSEYW5fNZWB5hFfci3Add4kGYA41:R4wFHoS3WXZshJX2VGd41

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks