General

  • Target

    bc3d7216242570c96bc6fefab24697b4fe31eae2f4bbc392b27a9dd22fdce535.exe

  • Size

    454KB

  • Sample

    241226-fd4wysxmbm

  • MD5

    d2bd3fc95c6d821deb4aedd51acf9e22

  • SHA1

    07e87305e9abb7dbd3f7eed30dc471b7f4447be3

  • SHA256

    bc3d7216242570c96bc6fefab24697b4fe31eae2f4bbc392b27a9dd22fdce535

  • SHA512

    416694643c205787146b0f7547f5e9eba54b50ef6d75328634cb04eeab2d50ebf2f1fb9ccd40d94d3e841daa7cdae57ee5c4cf085679653e6e0c29aebdeb12cc

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbea:q7Tc2NYHUrAwfMp3CDa

Malware Config

Targets

    • Target

      bc3d7216242570c96bc6fefab24697b4fe31eae2f4bbc392b27a9dd22fdce535.exe

    • Size

      454KB

    • MD5

      d2bd3fc95c6d821deb4aedd51acf9e22

    • SHA1

      07e87305e9abb7dbd3f7eed30dc471b7f4447be3

    • SHA256

      bc3d7216242570c96bc6fefab24697b4fe31eae2f4bbc392b27a9dd22fdce535

    • SHA512

      416694643c205787146b0f7547f5e9eba54b50ef6d75328634cb04eeab2d50ebf2f1fb9ccd40d94d3e841daa7cdae57ee5c4cf085679653e6e0c29aebdeb12cc

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbea:q7Tc2NYHUrAwfMp3CDa

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks