General

  • Target

    771e1385d3e9502ccc994521dedf78ed420673ca4a17bdf2941e0e8ffa61900b

  • Size

    453KB

  • Sample

    241227-26vdwaskbj

  • MD5

    609243d0265cb44a1f60cd626c2e9a2a

  • SHA1

    83540096107387538742e106c70cedfd56628020

  • SHA256

    771e1385d3e9502ccc994521dedf78ed420673ca4a17bdf2941e0e8ffa61900b

  • SHA512

    aad8916dff5c098dc8dbaf6fcf3941289356e98bee407e77656091b3ec9c0230d78def59e049acd912d6564529bf6f812c4f196425345a3e7ff94d7b64d20671

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeGM3:q7Tc2NYHUrAwfMp3CDGM3

Malware Config

Targets

    • Target

      771e1385d3e9502ccc994521dedf78ed420673ca4a17bdf2941e0e8ffa61900b

    • Size

      453KB

    • MD5

      609243d0265cb44a1f60cd626c2e9a2a

    • SHA1

      83540096107387538742e106c70cedfd56628020

    • SHA256

      771e1385d3e9502ccc994521dedf78ed420673ca4a17bdf2941e0e8ffa61900b

    • SHA512

      aad8916dff5c098dc8dbaf6fcf3941289356e98bee407e77656091b3ec9c0230d78def59e049acd912d6564529bf6f812c4f196425345a3e7ff94d7b64d20671

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeGM3:q7Tc2NYHUrAwfMp3CDGM3

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks