General

  • Target

    808f91658173c613b6f61664a018f1c64dbf206350e775922f7ac74290f65700.exe

  • Size

    453KB

  • Sample

    241226-dfkvravpbx

  • MD5

    f179f37b553998161af1c2ce6dc4f906

  • SHA1

    b1dae539d1ecb918e4d674dafbf40771937507d2

  • SHA256

    808f91658173c613b6f61664a018f1c64dbf206350e775922f7ac74290f65700

  • SHA512

    a44108ad09ecb3803abaa077b93cd3cca95a1de32d9b2192a37677dd68bb08dbae0b214a71b76b123645b78aa41168abb6cc59e2b4a7ac0bd1d5bf92d883f58f

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbes:q7Tc2NYHUrAwfMp3CDs

Malware Config

Targets

    • Target

      808f91658173c613b6f61664a018f1c64dbf206350e775922f7ac74290f65700.exe

    • Size

      453KB

    • MD5

      f179f37b553998161af1c2ce6dc4f906

    • SHA1

      b1dae539d1ecb918e4d674dafbf40771937507d2

    • SHA256

      808f91658173c613b6f61664a018f1c64dbf206350e775922f7ac74290f65700

    • SHA512

      a44108ad09ecb3803abaa077b93cd3cca95a1de32d9b2192a37677dd68bb08dbae0b214a71b76b123645b78aa41168abb6cc59e2b4a7ac0bd1d5bf92d883f58f

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbes:q7Tc2NYHUrAwfMp3CDs

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks