General

  • Target

    40b1539773c07e50d55df097e1c2aa555aad8501d1252ec88ecc55fef2afcb14.exe

  • Size

    453KB

  • Sample

    241226-hdvdmaynfv

  • MD5

    f7c7677aea13b955ac9b92850c70e7ea

  • SHA1

    d93dc45442005380b4747915175509277dd4ce2a

  • SHA256

    40b1539773c07e50d55df097e1c2aa555aad8501d1252ec88ecc55fef2afcb14

  • SHA512

    135bc00ac2d6e20757cd8981d64877124c4ff798a96e60c025603af8b0f9c62eec5cd5a23e596aa1d8c4fffc91fa881919b48d9b6fe108a67d3cbd8527cebb96

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbev:q7Tc2NYHUrAwfMp3CDv

Malware Config

Targets

    • Target

      40b1539773c07e50d55df097e1c2aa555aad8501d1252ec88ecc55fef2afcb14.exe

    • Size

      453KB

    • MD5

      f7c7677aea13b955ac9b92850c70e7ea

    • SHA1

      d93dc45442005380b4747915175509277dd4ce2a

    • SHA256

      40b1539773c07e50d55df097e1c2aa555aad8501d1252ec88ecc55fef2afcb14

    • SHA512

      135bc00ac2d6e20757cd8981d64877124c4ff798a96e60c025603af8b0f9c62eec5cd5a23e596aa1d8c4fffc91fa881919b48d9b6fe108a67d3cbd8527cebb96

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbev:q7Tc2NYHUrAwfMp3CDv

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks