General

  • Target

    62237a4cf49d3a6642b9c4c0213c9e733b6f28d292238b3bb5999368e5cf0e62N.exe

  • Size

    454KB

  • Sample

    250108-f1hx1awkaw

  • MD5

    2264cf49da909fcba22c838540b618b0

  • SHA1

    30dfe26e44df9e36e301f0dfd07588f382bcf2d4

  • SHA256

    62237a4cf49d3a6642b9c4c0213c9e733b6f28d292238b3bb5999368e5cf0e62

  • SHA512

    46acb68608040b4261df8240e5475d5f05d721570d4828ea6a6dcac9a7c1a57896d0bad85ac6b3489a9d2526b056094c810894277648840e42007a63cc8f0f6d

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbef:q7Tc2NYHUrAwfMp3CDf

Malware Config

Targets

    • Target

      62237a4cf49d3a6642b9c4c0213c9e733b6f28d292238b3bb5999368e5cf0e62N.exe

    • Size

      454KB

    • MD5

      2264cf49da909fcba22c838540b618b0

    • SHA1

      30dfe26e44df9e36e301f0dfd07588f382bcf2d4

    • SHA256

      62237a4cf49d3a6642b9c4c0213c9e733b6f28d292238b3bb5999368e5cf0e62

    • SHA512

      46acb68608040b4261df8240e5475d5f05d721570d4828ea6a6dcac9a7c1a57896d0bad85ac6b3489a9d2526b056094c810894277648840e42007a63cc8f0f6d

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbef:q7Tc2NYHUrAwfMp3CDf

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks