General

  • Target

    babdfe61f16d62282606d2ea63bdbd4e4993c88c9f7e236bf57adef6c8270c6f

  • Size

    454KB

  • Sample

    241223-cz1jwavkhp

  • MD5

    b04f96217665277605e62a671869befe

  • SHA1

    1e0693f1998cc079e15b6e1d04c41bb745854455

  • SHA256

    babdfe61f16d62282606d2ea63bdbd4e4993c88c9f7e236bf57adef6c8270c6f

  • SHA512

    624e437313d216e2ffe9535dfa2b66efc75d7019acdd577d5bccaf475de87199617a0ea5f15458b7604aa27618b07e0b9d8f7f70b931adf35e04fd6fcc6d80a0

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe6:q7Tc2NYHUrAwfMp3CD6

Malware Config

Targets

    • Target

      babdfe61f16d62282606d2ea63bdbd4e4993c88c9f7e236bf57adef6c8270c6f

    • Size

      454KB

    • MD5

      b04f96217665277605e62a671869befe

    • SHA1

      1e0693f1998cc079e15b6e1d04c41bb745854455

    • SHA256

      babdfe61f16d62282606d2ea63bdbd4e4993c88c9f7e236bf57adef6c8270c6f

    • SHA512

      624e437313d216e2ffe9535dfa2b66efc75d7019acdd577d5bccaf475de87199617a0ea5f15458b7604aa27618b07e0b9d8f7f70b931adf35e04fd6fcc6d80a0

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe6:q7Tc2NYHUrAwfMp3CD6

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks