General

  • Target

    ace0212831762c23ed684d2961dd285b91fac770936f6bd19e4658c17cf0677a.exe

  • Size

    454KB

  • Sample

    241226-y2mxfsykeq

  • MD5

    a542f4bebd6f590532273f252d8dbcd6

  • SHA1

    3d2aa1647ee8f3e6fe5073aeb623000dd1628d04

  • SHA256

    ace0212831762c23ed684d2961dd285b91fac770936f6bd19e4658c17cf0677a

  • SHA512

    625383b1658179bcad58afe5c6ff4a215c7ba0143e24042b15c31feb39cd9cd3cb418b76824c9996b1a3a4270998f00bf670b8a1153567b2d59f7e2f22535e3a

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe4:q7Tc2NYHUrAwfMp3CD4

Malware Config

Targets

    • Target

      ace0212831762c23ed684d2961dd285b91fac770936f6bd19e4658c17cf0677a.exe

    • Size

      454KB

    • MD5

      a542f4bebd6f590532273f252d8dbcd6

    • SHA1

      3d2aa1647ee8f3e6fe5073aeb623000dd1628d04

    • SHA256

      ace0212831762c23ed684d2961dd285b91fac770936f6bd19e4658c17cf0677a

    • SHA512

      625383b1658179bcad58afe5c6ff4a215c7ba0143e24042b15c31feb39cd9cd3cb418b76824c9996b1a3a4270998f00bf670b8a1153567b2d59f7e2f22535e3a

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe4:q7Tc2NYHUrAwfMp3CD4

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks