General

  • Target

    4be4b0eee2ca2d92ef84d280a6527a7d744b87980ad0e003d3aa0515bf925191N.exe

  • Size

    454KB

  • Sample

    250108-e8kk5awrar

  • MD5

    d9af5e0057a7418da30d0dbc08e40c40

  • SHA1

    be59bc73ceffa46a38bcbbe21c9fc4b14c1f9c6c

  • SHA256

    4be4b0eee2ca2d92ef84d280a6527a7d744b87980ad0e003d3aa0515bf925191

  • SHA512

    d0ddee52bbb5bcfbbca9372c85c74d9182362a7010452e897d0cc6868494342e48090a3c2f95cdcb8e888627070cf0e19845f9b7ae230ab4a40e224f6aa62927

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeS:q7Tc2NYHUrAwfMp3CDS

Malware Config

Targets

    • Target

      4be4b0eee2ca2d92ef84d280a6527a7d744b87980ad0e003d3aa0515bf925191N.exe

    • Size

      454KB

    • MD5

      d9af5e0057a7418da30d0dbc08e40c40

    • SHA1

      be59bc73ceffa46a38bcbbe21c9fc4b14c1f9c6c

    • SHA256

      4be4b0eee2ca2d92ef84d280a6527a7d744b87980ad0e003d3aa0515bf925191

    • SHA512

      d0ddee52bbb5bcfbbca9372c85c74d9182362a7010452e897d0cc6868494342e48090a3c2f95cdcb8e888627070cf0e19845f9b7ae230ab4a40e224f6aa62927

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeS:q7Tc2NYHUrAwfMp3CDS

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks