General

  • Target

    8323446802499be1ea4363f8612c6462ef6f4077fc2d61067b0b1ba7373d9f43.exe

  • Size

    454KB

  • Sample

    241226-llgdhssnan

  • MD5

    73fd9cebc58cef28121ef5a9fcf2cb57

  • SHA1

    258cf8a41c4d3be549207e17df6d8d166a7581d7

  • SHA256

    8323446802499be1ea4363f8612c6462ef6f4077fc2d61067b0b1ba7373d9f43

  • SHA512

    75da5e21d3fd6381842e8da705c3113f06928c7593be72534c78582d0b610239f4da7bed573f86c00e35bf40d740a3b24bf8e614497a15ccb2591acdb5081e82

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbes:q7Tc2NYHUrAwfMp3CDs

Malware Config

Targets

    • Target

      8323446802499be1ea4363f8612c6462ef6f4077fc2d61067b0b1ba7373d9f43.exe

    • Size

      454KB

    • MD5

      73fd9cebc58cef28121ef5a9fcf2cb57

    • SHA1

      258cf8a41c4d3be549207e17df6d8d166a7581d7

    • SHA256

      8323446802499be1ea4363f8612c6462ef6f4077fc2d61067b0b1ba7373d9f43

    • SHA512

      75da5e21d3fd6381842e8da705c3113f06928c7593be72534c78582d0b610239f4da7bed573f86c00e35bf40d740a3b24bf8e614497a15ccb2591acdb5081e82

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbes:q7Tc2NYHUrAwfMp3CDs

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks