General

  • Target

    75b8cec517b6b471073e3cad11cea785f3bd7a813f8b52fe8ee2b9b1eee027e6N.exe

  • Size

    454KB

  • Sample

    241225-xmt7jssra1

  • MD5

    771da170f23dba886528cc3a03963340

  • SHA1

    91bf98d83f4328c2d300059af58cbc33bc2bf164

  • SHA256

    75b8cec517b6b471073e3cad11cea785f3bd7a813f8b52fe8ee2b9b1eee027e6

  • SHA512

    5383160e325fcab7eb81ad35daac2727cc3eec6c3705d71ac487b97cfea61cf0c11d4d15bb7670457b186d5aa8ea5828b68078166f74b1a9ac13d382068295a3

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeOo:q7Tc2NYHUrAwfMp3CDOo

Malware Config

Targets

    • Target

      75b8cec517b6b471073e3cad11cea785f3bd7a813f8b52fe8ee2b9b1eee027e6N.exe

    • Size

      454KB

    • MD5

      771da170f23dba886528cc3a03963340

    • SHA1

      91bf98d83f4328c2d300059af58cbc33bc2bf164

    • SHA256

      75b8cec517b6b471073e3cad11cea785f3bd7a813f8b52fe8ee2b9b1eee027e6

    • SHA512

      5383160e325fcab7eb81ad35daac2727cc3eec6c3705d71ac487b97cfea61cf0c11d4d15bb7670457b186d5aa8ea5828b68078166f74b1a9ac13d382068295a3

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeOo:q7Tc2NYHUrAwfMp3CDOo

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks