General

  • Target

    086260fd83d89a1bb1914ac053fb4557609fdfc9079912a91e917bd6e55cb783

  • Size

    454KB

  • Sample

    241228-x68jaa1pbm

  • MD5

    860567e1d47173adfb2ede47bd9ebd36

  • SHA1

    8b82b66ec7724c6921b8308793705320508b16c4

  • SHA256

    086260fd83d89a1bb1914ac053fb4557609fdfc9079912a91e917bd6e55cb783

  • SHA512

    9aba77808cad8b9169a0b58583681609f035e125e48203e0cfdc679521917e76ffb1228a04fbce40f58eed6bc5b02fe9c6d3131c148738781680282075f5af84

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeP:q7Tc2NYHUrAwfMp3CDP

Malware Config

Targets

    • Target

      086260fd83d89a1bb1914ac053fb4557609fdfc9079912a91e917bd6e55cb783

    • Size

      454KB

    • MD5

      860567e1d47173adfb2ede47bd9ebd36

    • SHA1

      8b82b66ec7724c6921b8308793705320508b16c4

    • SHA256

      086260fd83d89a1bb1914ac053fb4557609fdfc9079912a91e917bd6e55cb783

    • SHA512

      9aba77808cad8b9169a0b58583681609f035e125e48203e0cfdc679521917e76ffb1228a04fbce40f58eed6bc5b02fe9c6d3131c148738781680282075f5af84

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeP:q7Tc2NYHUrAwfMp3CDP

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks