General

  • Target

    ba5a80a7e71f32721d6a2aaa9a14be133471b904b82ebf280842bbb43ad98cac

  • Size

    21KB

  • Sample

    241218-xs9t7ayldy

  • MD5

    c6d8fb8eb2d5c1d4850a2905f4ad6cf3

  • SHA1

    c0e48b03d59ceaab336e83b7333600d503c4c508

  • SHA256

    ba5a80a7e71f32721d6a2aaa9a14be133471b904b82ebf280842bbb43ad98cac

  • SHA512

    fce9837773a621978577b78d88e97fc58fc77af5dc82290b6ef927e629db8a3c1dc67a6c6730614ac9a358d8bcfa1abb3d9aecd574a3795234563220c89297bf

  • SSDEEP

    384:PipJh4prQ0M2W400vG7oofTvhMKFrPVLhK/RVaOd3gqoL:KwY2+0vQoeDhLLaRpd3gqo

Malware Config

Targets

    • Target

      ba5a80a7e71f32721d6a2aaa9a14be133471b904b82ebf280842bbb43ad98cac

    • Size

      21KB

    • MD5

      c6d8fb8eb2d5c1d4850a2905f4ad6cf3

    • SHA1

      c0e48b03d59ceaab336e83b7333600d503c4c508

    • SHA256

      ba5a80a7e71f32721d6a2aaa9a14be133471b904b82ebf280842bbb43ad98cac

    • SHA512

      fce9837773a621978577b78d88e97fc58fc77af5dc82290b6ef927e629db8a3c1dc67a6c6730614ac9a358d8bcfa1abb3d9aecd574a3795234563220c89297bf

    • SSDEEP

      384:PipJh4prQ0M2W400vG7oofTvhMKFrPVLhK/RVaOd3gqoL:KwY2+0vQoeDhLLaRpd3gqo

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks