General

  • Target

    3c3ca734e2520d29a08670819ae17dc47de184828d7eba5c2e3da73e5b5a9319.exe

  • Size

    453KB

  • Sample

    241219-g7j93ssmd1

  • MD5

    d39bb7af27f102defd19429d31a5fa5c

  • SHA1

    b2f1643aff977d2f033b7abbdda630dbb6e99b3f

  • SHA256

    3c3ca734e2520d29a08670819ae17dc47de184828d7eba5c2e3da73e5b5a9319

  • SHA512

    d1a6cc077666f1586b5193d6ae3d66c68830b90142b04cce8a2b82d2f64b62bab7225a886038f899251ee4a5af6865641cd8c707cc08fb74f21fa505d24dd391

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbec:q7Tc2NYHUrAwfMp3CDc

Malware Config

Targets

    • Target

      3c3ca734e2520d29a08670819ae17dc47de184828d7eba5c2e3da73e5b5a9319.exe

    • Size

      453KB

    • MD5

      d39bb7af27f102defd19429d31a5fa5c

    • SHA1

      b2f1643aff977d2f033b7abbdda630dbb6e99b3f

    • SHA256

      3c3ca734e2520d29a08670819ae17dc47de184828d7eba5c2e3da73e5b5a9319

    • SHA512

      d1a6cc077666f1586b5193d6ae3d66c68830b90142b04cce8a2b82d2f64b62bab7225a886038f899251ee4a5af6865641cd8c707cc08fb74f21fa505d24dd391

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbec:q7Tc2NYHUrAwfMp3CDc

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks