General

  • Target

    77c24a7fd8754d0b8cf05feac2478ff1b4fc202303a856475424a0b5f548fad8

  • Size

    456KB

  • Sample

    241229-bbd6asxlaz

  • MD5

    ed74182686793d6838e9c386d1d7360a

  • SHA1

    0c4356db67546e546e0646dc11cc15096fa99131

  • SHA256

    77c24a7fd8754d0b8cf05feac2478ff1b4fc202303a856475424a0b5f548fad8

  • SHA512

    70cc7d52081a40e8be76c11b342c10b6049559288beafd0ae14935c5cffb0b31da42600e7c08b521a00a235728ae899b6c2efeb85cbc64d77f584d233603734f

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRB:q7Tc2NYHUrAwfMp3CDRB

Malware Config

Targets

    • Target

      77c24a7fd8754d0b8cf05feac2478ff1b4fc202303a856475424a0b5f548fad8

    • Size

      456KB

    • MD5

      ed74182686793d6838e9c386d1d7360a

    • SHA1

      0c4356db67546e546e0646dc11cc15096fa99131

    • SHA256

      77c24a7fd8754d0b8cf05feac2478ff1b4fc202303a856475424a0b5f548fad8

    • SHA512

      70cc7d52081a40e8be76c11b342c10b6049559288beafd0ae14935c5cffb0b31da42600e7c08b521a00a235728ae899b6c2efeb85cbc64d77f584d233603734f

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRB:q7Tc2NYHUrAwfMp3CDRB

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks