General

  • Target

    8eb5824e39b9cfea66be9c53577ef503c902b539134e139c5f2115afcae01acb.exe

  • Size

    453KB

  • Sample

    241219-htqqdavkak

  • MD5

    46415c86eca42713aea3dd7af18ac01c

  • SHA1

    aebd7129f3467ce63fcf77596e52cc866f67e47c

  • SHA256

    8eb5824e39b9cfea66be9c53577ef503c902b539134e139c5f2115afcae01acb

  • SHA512

    790c779140fa5055564c3435b667114315b0383ffd3034d1b0d46bec462caca6a2747d7c608007b22d1dc81705c096fb85ef8673ce265275df3774422b0a22d1

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbep:q7Tc2NYHUrAwfMp3CDp

Malware Config

Targets

    • Target

      8eb5824e39b9cfea66be9c53577ef503c902b539134e139c5f2115afcae01acb.exe

    • Size

      453KB

    • MD5

      46415c86eca42713aea3dd7af18ac01c

    • SHA1

      aebd7129f3467ce63fcf77596e52cc866f67e47c

    • SHA256

      8eb5824e39b9cfea66be9c53577ef503c902b539134e139c5f2115afcae01acb

    • SHA512

      790c779140fa5055564c3435b667114315b0383ffd3034d1b0d46bec462caca6a2747d7c608007b22d1dc81705c096fb85ef8673ce265275df3774422b0a22d1

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbep:q7Tc2NYHUrAwfMp3CDp

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks