General

  • Target

    93cd3cac6f6691061ac4e5a5515a68853c326498f1bcd404210bbbd81f89033a

  • Size

    454KB

  • Sample

    241229-cdjz1aypbm

  • MD5

    09a2c626e2c1fd9159a71f10dd8abf04

  • SHA1

    4748e5288a6a2798aadc1e3ea4a7f14e6124be50

  • SHA256

    93cd3cac6f6691061ac4e5a5515a68853c326498f1bcd404210bbbd81f89033a

  • SHA512

    60e4a0733f434e65f8b24584a3a8d72e3cd0002113c3f786764a18b874b1f3d036402d1731cff98095cf896be5d382e232aba07f9c5706666b23c382a69de7b2

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbel:q7Tc2NYHUrAwfMp3CDl

Malware Config

Targets

    • Target

      93cd3cac6f6691061ac4e5a5515a68853c326498f1bcd404210bbbd81f89033a

    • Size

      454KB

    • MD5

      09a2c626e2c1fd9159a71f10dd8abf04

    • SHA1

      4748e5288a6a2798aadc1e3ea4a7f14e6124be50

    • SHA256

      93cd3cac6f6691061ac4e5a5515a68853c326498f1bcd404210bbbd81f89033a

    • SHA512

      60e4a0733f434e65f8b24584a3a8d72e3cd0002113c3f786764a18b874b1f3d036402d1731cff98095cf896be5d382e232aba07f9c5706666b23c382a69de7b2

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbel:q7Tc2NYHUrAwfMp3CDl

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks