General

  • Target

    74091e51c5b3ee973e1ef38240689bf7743d694c0ef240c1b5a6f9124e32657e.exe

  • Size

    454KB

  • Sample

    241225-1h9cfsymbx

  • MD5

    3b8697916aff86e42255e5cc4f31ac69

  • SHA1

    22ea5b5e0aa777d9b044a024493edabd918d0204

  • SHA256

    74091e51c5b3ee973e1ef38240689bf7743d694c0ef240c1b5a6f9124e32657e

  • SHA512

    41ed4250d7bdb48a4a0ccb2c9c72bca02f34b3f6b1405d6441298dde42db7d8bbf8b0accb6ea7b7f10d159ffc0b71b5772199b4e431a3234c61ca91fbd59ded0

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbed:q7Tc2NYHUrAwfMp3CDd

Malware Config

Targets

    • Target

      74091e51c5b3ee973e1ef38240689bf7743d694c0ef240c1b5a6f9124e32657e.exe

    • Size

      454KB

    • MD5

      3b8697916aff86e42255e5cc4f31ac69

    • SHA1

      22ea5b5e0aa777d9b044a024493edabd918d0204

    • SHA256

      74091e51c5b3ee973e1ef38240689bf7743d694c0ef240c1b5a6f9124e32657e

    • SHA512

      41ed4250d7bdb48a4a0ccb2c9c72bca02f34b3f6b1405d6441298dde42db7d8bbf8b0accb6ea7b7f10d159ffc0b71b5772199b4e431a3234c61ca91fbd59ded0

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbed:q7Tc2NYHUrAwfMp3CDd

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks