General

  • Target

    9570346b269aa867e821c88325699e8eefb2310b3c94118e745c5dd7db3a6028.exe

  • Size

    453KB

  • Sample

    241226-ds6yrawjgr

  • MD5

    25270dba82b4387dce3ee39afb168b5e

  • SHA1

    53e312f75105cbb6c9f9a24e25916a48648f3f55

  • SHA256

    9570346b269aa867e821c88325699e8eefb2310b3c94118e745c5dd7db3a6028

  • SHA512

    01955c33abdd340645e44caf784420c6042b5d2df06dca6214c781adcfc0278f0ecc832856b42b1f6d60b2462940c3f2813403b6d9b30436ee713f3497af6afc

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe3:q7Tc2NYHUrAwfMp3CD3

Malware Config

Targets

    • Target

      9570346b269aa867e821c88325699e8eefb2310b3c94118e745c5dd7db3a6028.exe

    • Size

      453KB

    • MD5

      25270dba82b4387dce3ee39afb168b5e

    • SHA1

      53e312f75105cbb6c9f9a24e25916a48648f3f55

    • SHA256

      9570346b269aa867e821c88325699e8eefb2310b3c94118e745c5dd7db3a6028

    • SHA512

      01955c33abdd340645e44caf784420c6042b5d2df06dca6214c781adcfc0278f0ecc832856b42b1f6d60b2462940c3f2813403b6d9b30436ee713f3497af6afc

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe3:q7Tc2NYHUrAwfMp3CD3

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks