General

  • Target

    9650aa02e224a1de270acc5110913ffa5bf05584246ea8ca8b128a5d70d5f0b9N.exe

  • Size

    452KB

  • Sample

    241226-bve7pstkht

  • MD5

    9b5f5c496740a90f0be8bf8bcb256110

  • SHA1

    46f1efafa6623130dc998d0709dd201cc3d351fd

  • SHA256

    9650aa02e224a1de270acc5110913ffa5bf05584246ea8ca8b128a5d70d5f0b9

  • SHA512

    3298f46d35430cb1587334705d9734cc5900e4daef5e54269c43227151f1e3a67f11345cba455671ec3a0ed59370fd6a76fc61639e226e82816a4aeef44d3957

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeE:q7Tc2NYHUrAwfMp3CDE

Malware Config

Targets

    • Target

      9650aa02e224a1de270acc5110913ffa5bf05584246ea8ca8b128a5d70d5f0b9N.exe

    • Size

      452KB

    • MD5

      9b5f5c496740a90f0be8bf8bcb256110

    • SHA1

      46f1efafa6623130dc998d0709dd201cc3d351fd

    • SHA256

      9650aa02e224a1de270acc5110913ffa5bf05584246ea8ca8b128a5d70d5f0b9

    • SHA512

      3298f46d35430cb1587334705d9734cc5900e4daef5e54269c43227151f1e3a67f11345cba455671ec3a0ed59370fd6a76fc61639e226e82816a4aeef44d3957

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeE:q7Tc2NYHUrAwfMp3CDE

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks