General

  • Target

    f07756d90f1ebe179e441c012048d738134d7b240a0fb2becf75881402ec0b94.exe

  • Size

    454KB

  • Sample

    241226-ltsfrasmav

  • MD5

    e923c13b68357e17befed95e04380873

  • SHA1

    29d10f5970269163b37dd4b02d5234119bc51bb2

  • SHA256

    f07756d90f1ebe179e441c012048d738134d7b240a0fb2becf75881402ec0b94

  • SHA512

    5f6102b90a01f37f6467d6870b31e15802bd5b7367bdb9f98b0a10c43c5dd8c829a4b332aab0af9e7ccfa364b69bc8ac93b15c4d4e70022c83ffac1c5178dada

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeC:q7Tc2NYHUrAwfMp3CDC

Malware Config

Targets

    • Target

      f07756d90f1ebe179e441c012048d738134d7b240a0fb2becf75881402ec0b94.exe

    • Size

      454KB

    • MD5

      e923c13b68357e17befed95e04380873

    • SHA1

      29d10f5970269163b37dd4b02d5234119bc51bb2

    • SHA256

      f07756d90f1ebe179e441c012048d738134d7b240a0fb2becf75881402ec0b94

    • SHA512

      5f6102b90a01f37f6467d6870b31e15802bd5b7367bdb9f98b0a10c43c5dd8c829a4b332aab0af9e7ccfa364b69bc8ac93b15c4d4e70022c83ffac1c5178dada

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeC:q7Tc2NYHUrAwfMp3CDC

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks