General

  • Target

    1919880747286829fb5451b8a47c2dddf457cd367de8056f7e62a0a04e8f8ce0.exe

  • Size

    454KB

  • Sample

    241226-yt4v1axnh1

  • MD5

    46a7f8b252b602740d469013d50f4fea

  • SHA1

    6698c429e1ec586083ee9f35a20606aaca5a630c

  • SHA256

    1919880747286829fb5451b8a47c2dddf457cd367de8056f7e62a0a04e8f8ce0

  • SHA512

    a93fb4896d86b21545eb048fd42712af0b456925aa1fe8cd158547f80943d4d7825acf41320c43b865c778a2b23cb69247452c7a9f67365539c261187c60930a

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeW:q7Tc2NYHUrAwfMp3CDW

Malware Config

Targets

    • Target

      1919880747286829fb5451b8a47c2dddf457cd367de8056f7e62a0a04e8f8ce0.exe

    • Size

      454KB

    • MD5

      46a7f8b252b602740d469013d50f4fea

    • SHA1

      6698c429e1ec586083ee9f35a20606aaca5a630c

    • SHA256

      1919880747286829fb5451b8a47c2dddf457cd367de8056f7e62a0a04e8f8ce0

    • SHA512

      a93fb4896d86b21545eb048fd42712af0b456925aa1fe8cd158547f80943d4d7825acf41320c43b865c778a2b23cb69247452c7a9f67365539c261187c60930a

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeW:q7Tc2NYHUrAwfMp3CDW

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks