General

  • Target

    2314ce19b6b4de5b58a8dc9bf78f460fdd07865856b6589ece188ee0b4281a57.exe

  • Size

    455KB

  • Sample

    241225-137pcszkd1

  • MD5

    8b0b63ddbc9509733be91eb1ea52283f

  • SHA1

    69331d6f01f6252fe7bf463603efd3ae91516bfb

  • SHA256

    2314ce19b6b4de5b58a8dc9bf78f460fdd07865856b6589ece188ee0b4281a57

  • SHA512

    861c3058288590cf034cb40ca821ea139fbc7d0d5799c1e585f07d26de8e8d15562a4449f265d9e9800d8368d5d23427cdf88a76b1d2b43b2246455ec77994f2

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbei:q7Tc2NYHUrAwfMp3CDi

Malware Config

Targets

    • Target

      2314ce19b6b4de5b58a8dc9bf78f460fdd07865856b6589ece188ee0b4281a57.exe

    • Size

      455KB

    • MD5

      8b0b63ddbc9509733be91eb1ea52283f

    • SHA1

      69331d6f01f6252fe7bf463603efd3ae91516bfb

    • SHA256

      2314ce19b6b4de5b58a8dc9bf78f460fdd07865856b6589ece188ee0b4281a57

    • SHA512

      861c3058288590cf034cb40ca821ea139fbc7d0d5799c1e585f07d26de8e8d15562a4449f265d9e9800d8368d5d23427cdf88a76b1d2b43b2246455ec77994f2

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbei:q7Tc2NYHUrAwfMp3CDi

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks