General

  • Target

    e6755a41a691a8cb5e2f7ac24fdada40a866b22f57ec59d9888a95dae6455c1f.exe

  • Size

    454KB

  • Sample

    250108-fay7asvjfs

  • MD5

    fffe4b4231b915a273af6d8b55059eca

  • SHA1

    8075bdc2609594817819443949dd44e36e7132e0

  • SHA256

    e6755a41a691a8cb5e2f7ac24fdada40a866b22f57ec59d9888a95dae6455c1f

  • SHA512

    ad0de7cc51c5b441589b4be6feec8c4914dfa8e473720e896fe3ed91fbbabb1627293edde38c39dfadeb26778a5e82b45e165613b731dfd0f3d5302fe2093924

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe7:q7Tc2NYHUrAwfMp3CD7

Malware Config

Targets

    • Target

      e6755a41a691a8cb5e2f7ac24fdada40a866b22f57ec59d9888a95dae6455c1f.exe

    • Size

      454KB

    • MD5

      fffe4b4231b915a273af6d8b55059eca

    • SHA1

      8075bdc2609594817819443949dd44e36e7132e0

    • SHA256

      e6755a41a691a8cb5e2f7ac24fdada40a866b22f57ec59d9888a95dae6455c1f

    • SHA512

      ad0de7cc51c5b441589b4be6feec8c4914dfa8e473720e896fe3ed91fbbabb1627293edde38c39dfadeb26778a5e82b45e165613b731dfd0f3d5302fe2093924

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe7:q7Tc2NYHUrAwfMp3CD7

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks