General

  • Target

    9b967274ca4cb7284decde8fad2c074ae65c5ec25331f6941194ff8b9b8a9ca9

  • Size

    454KB

  • Sample

    241223-bwy17stmfl

  • MD5

    c15fcd440d061fc6fec6fc05d291b1bd

  • SHA1

    63059d94c0aac27ca1b772e990feac14df86c717

  • SHA256

    9b967274ca4cb7284decde8fad2c074ae65c5ec25331f6941194ff8b9b8a9ca9

  • SHA512

    258de746f0c3b94ca873aa7ae80c7ac9a816eb3210231286d0a277301e884f7f41aa1eb67e6d27f1a5c2c6c8ee78e949875ca14e578174fc5cf53bf0a89b8c74

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbem:q7Tc2NYHUrAwfMp3CDm

Malware Config

Targets

    • Target

      9b967274ca4cb7284decde8fad2c074ae65c5ec25331f6941194ff8b9b8a9ca9

    • Size

      454KB

    • MD5

      c15fcd440d061fc6fec6fc05d291b1bd

    • SHA1

      63059d94c0aac27ca1b772e990feac14df86c717

    • SHA256

      9b967274ca4cb7284decde8fad2c074ae65c5ec25331f6941194ff8b9b8a9ca9

    • SHA512

      258de746f0c3b94ca873aa7ae80c7ac9a816eb3210231286d0a277301e884f7f41aa1eb67e6d27f1a5c2c6c8ee78e949875ca14e578174fc5cf53bf0a89b8c74

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbem:q7Tc2NYHUrAwfMp3CDm

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks