General

  • Target

    0a7c384b4cb1757672c034a508d1545abe06b56b75caf3e4571d8883f6e355d3.exe

  • Size

    453KB

  • Sample

    241226-a6lyyssreq

  • MD5

    e86944fd01d67e75db3dc8bcb51a3eef

  • SHA1

    47fa15207d2d7d54fa3a120a17ffe0b6da1547ba

  • SHA256

    0a7c384b4cb1757672c034a508d1545abe06b56b75caf3e4571d8883f6e355d3

  • SHA512

    ed421fcb45bc77dd35d6c69aedeeada7a31ddd6a80642ce692914bcca4c0572f7203340c089b0f70334b1224539598173a1ce4fb533187989be854d55c21e809

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe3:q7Tc2NYHUrAwfMp3CD3

Malware Config

Targets

    • Target

      0a7c384b4cb1757672c034a508d1545abe06b56b75caf3e4571d8883f6e355d3.exe

    • Size

      453KB

    • MD5

      e86944fd01d67e75db3dc8bcb51a3eef

    • SHA1

      47fa15207d2d7d54fa3a120a17ffe0b6da1547ba

    • SHA256

      0a7c384b4cb1757672c034a508d1545abe06b56b75caf3e4571d8883f6e355d3

    • SHA512

      ed421fcb45bc77dd35d6c69aedeeada7a31ddd6a80642ce692914bcca4c0572f7203340c089b0f70334b1224539598173a1ce4fb533187989be854d55c21e809

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe3:q7Tc2NYHUrAwfMp3CD3

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks