General

  • Target

    93cb6dfc541ccb08cca5a6f78b7f2785bd3ef4e3555bdca32010fed497b94bdd

  • Size

    456KB

  • Sample

    241228-aqymtasmgz

  • MD5

    aebfd66057fce37eb6f6d86f2a5cb55a

  • SHA1

    a49856f6249404b4496cc68886a1aaee1d89e8f9

  • SHA256

    93cb6dfc541ccb08cca5a6f78b7f2785bd3ef4e3555bdca32010fed497b94bdd

  • SHA512

    83e9d4bf9f040d86092870dca79eb4791445f721cbe03d30a6a10c1b4d94d100cfecfc27ec025abff080a7df40975bf79a37e915ce6b56f1d17610e833644194

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRh:q7Tc2NYHUrAwfMp3CDRh

Malware Config

Targets

    • Target

      93cb6dfc541ccb08cca5a6f78b7f2785bd3ef4e3555bdca32010fed497b94bdd

    • Size

      456KB

    • MD5

      aebfd66057fce37eb6f6d86f2a5cb55a

    • SHA1

      a49856f6249404b4496cc68886a1aaee1d89e8f9

    • SHA256

      93cb6dfc541ccb08cca5a6f78b7f2785bd3ef4e3555bdca32010fed497b94bdd

    • SHA512

      83e9d4bf9f040d86092870dca79eb4791445f721cbe03d30a6a10c1b4d94d100cfecfc27ec025abff080a7df40975bf79a37e915ce6b56f1d17610e833644194

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRh:q7Tc2NYHUrAwfMp3CDRh

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks