General

  • Target

    6cd650fbce79f4bb30bea7757fa13f9cf889c23a8b6bb4e54d6e78ebadaf5fe7.exe

  • Size

    454KB

  • Sample

    241226-cv42havkas

  • MD5

    6eb9a4596d14f5bd8e3d6403b3ee2012

  • SHA1

    996feb705a86e00b5f1e17ef0dd5b6a6e43239d9

  • SHA256

    6cd650fbce79f4bb30bea7757fa13f9cf889c23a8b6bb4e54d6e78ebadaf5fe7

  • SHA512

    673e07ca57e01e4880f1efa1e6fb996a12b22178948e1e68496741e56c1adedd15699a4361110e5580621730257ce51ed896d816b44eac0be24ebb21d3c0dd20

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeS:q7Tc2NYHUrAwfMp3CDS

Malware Config

Targets

    • Target

      6cd650fbce79f4bb30bea7757fa13f9cf889c23a8b6bb4e54d6e78ebadaf5fe7.exe

    • Size

      454KB

    • MD5

      6eb9a4596d14f5bd8e3d6403b3ee2012

    • SHA1

      996feb705a86e00b5f1e17ef0dd5b6a6e43239d9

    • SHA256

      6cd650fbce79f4bb30bea7757fa13f9cf889c23a8b6bb4e54d6e78ebadaf5fe7

    • SHA512

      673e07ca57e01e4880f1efa1e6fb996a12b22178948e1e68496741e56c1adedd15699a4361110e5580621730257ce51ed896d816b44eac0be24ebb21d3c0dd20

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeS:q7Tc2NYHUrAwfMp3CDS

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks