General

  • Target

    54519c46bf5fedb48aa1859294b70ae1eb1961c31d1e41e63991dacad8af900a

  • Size

    457KB

  • Sample

    241228-278ynavkhz

  • MD5

    6b6f6ab45056ceec50b44555bea7c3a1

  • SHA1

    e0b9803fcc80aa2e6d2b339e13905935cc32b5a3

  • SHA256

    54519c46bf5fedb48aa1859294b70ae1eb1961c31d1e41e63991dacad8af900a

  • SHA512

    4e18850c7f6bffb8d0d500b3e75dd4df8266ae1d0ec9c8f6868a190ff300025892214827a768926f7196661ca2086a3bc26afae613a7506aa61886749b82a99c

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRNa:q7Tc2NYHUrAwfMp3CDRA

Malware Config

Targets

    • Target

      54519c46bf5fedb48aa1859294b70ae1eb1961c31d1e41e63991dacad8af900a

    • Size

      457KB

    • MD5

      6b6f6ab45056ceec50b44555bea7c3a1

    • SHA1

      e0b9803fcc80aa2e6d2b339e13905935cc32b5a3

    • SHA256

      54519c46bf5fedb48aa1859294b70ae1eb1961c31d1e41e63991dacad8af900a

    • SHA512

      4e18850c7f6bffb8d0d500b3e75dd4df8266ae1d0ec9c8f6868a190ff300025892214827a768926f7196661ca2086a3bc26afae613a7506aa61886749b82a99c

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRNa:q7Tc2NYHUrAwfMp3CDRA

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks