General

  • Target

    7a86f38aa37093d191b2e99274b2966072628382adb63df3d554074ddafaebb1.exe

  • Size

    453KB

  • Sample

    241226-scs5aayjev

  • MD5

    279c0bf89115446246b702f81ea47a0e

  • SHA1

    780d7ee678fd21458d0f4332ef44e1454addb58d

  • SHA256

    7a86f38aa37093d191b2e99274b2966072628382adb63df3d554074ddafaebb1

  • SHA512

    4e673d96e24988c51ac851f7e8b5bc0ec21dbdde92d5e1dd92e56e2cb06b84b6fcd13d68ae6cc8c510f38dcb9a20af51f378a1449f2e6a5d0b1ed2744659c6ad

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe9:q7Tc2NYHUrAwfMp3CD9

Malware Config

Targets

    • Target

      7a86f38aa37093d191b2e99274b2966072628382adb63df3d554074ddafaebb1.exe

    • Size

      453KB

    • MD5

      279c0bf89115446246b702f81ea47a0e

    • SHA1

      780d7ee678fd21458d0f4332ef44e1454addb58d

    • SHA256

      7a86f38aa37093d191b2e99274b2966072628382adb63df3d554074ddafaebb1

    • SHA512

      4e673d96e24988c51ac851f7e8b5bc0ec21dbdde92d5e1dd92e56e2cb06b84b6fcd13d68ae6cc8c510f38dcb9a20af51f378a1449f2e6a5d0b1ed2744659c6ad

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe9:q7Tc2NYHUrAwfMp3CD9

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks