General

  • Target

    dba6988841f86d18a62df5ab724e9d96b170ea0071d5f5f03b6bcf34e2171518

  • Size

    406KB

  • Sample

    241223-ecmevawjar

  • MD5

    a54435cfa0729aba573f4eb2abd3f827

  • SHA1

    3d8968b4c79a64ac0e61ad27808301b65e74c5ff

  • SHA256

    dba6988841f86d18a62df5ab724e9d96b170ea0071d5f5f03b6bcf34e2171518

  • SHA512

    f86dae4b94c54600a1a10aea59b325ca4269f49e2319330f492fb47b20ec82b295f48b7771cb86c539436cdd7d9274d07a098dc86e156e51306057292bb3282d

  • SSDEEP

    6144:0cm4FmowdHoSH5BCwdyPUVn1/PRN2kIHVtS6o:C4wFHoS3C8Vnnqo6o

Malware Config

Targets

    • Target

      dba6988841f86d18a62df5ab724e9d96b170ea0071d5f5f03b6bcf34e2171518

    • Size

      406KB

    • MD5

      a54435cfa0729aba573f4eb2abd3f827

    • SHA1

      3d8968b4c79a64ac0e61ad27808301b65e74c5ff

    • SHA256

      dba6988841f86d18a62df5ab724e9d96b170ea0071d5f5f03b6bcf34e2171518

    • SHA512

      f86dae4b94c54600a1a10aea59b325ca4269f49e2319330f492fb47b20ec82b295f48b7771cb86c539436cdd7d9274d07a098dc86e156e51306057292bb3282d

    • SSDEEP

      6144:0cm4FmowdHoSH5BCwdyPUVn1/PRN2kIHVtS6o:C4wFHoS3C8Vnnqo6o

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks