General

  • Target

    958bbb6933267dd0be62fd22ee27c518f6d2024736df5d9e7fdaf948877ae968

  • Size

    454KB

  • Sample

    250108-fey24avlbz

  • MD5

    a7e062393050bf8eb1f8e35bbcadf474

  • SHA1

    cf173fa49f19918d9810dab48f83f5adb11babc6

  • SHA256

    958bbb6933267dd0be62fd22ee27c518f6d2024736df5d9e7fdaf948877ae968

  • SHA512

    7b49ac399e534f45f579f5ccf235f6c5bb5a07b20045f64eff20dbd5fb90dd687d24c7f33eb3ce352f2e699edc60370443eb4ad9c367302221ec1db3100af457

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeG:q7Tc2NYHUrAwfMp3CDG

Malware Config

Targets

    • Target

      958bbb6933267dd0be62fd22ee27c518f6d2024736df5d9e7fdaf948877ae968

    • Size

      454KB

    • MD5

      a7e062393050bf8eb1f8e35bbcadf474

    • SHA1

      cf173fa49f19918d9810dab48f83f5adb11babc6

    • SHA256

      958bbb6933267dd0be62fd22ee27c518f6d2024736df5d9e7fdaf948877ae968

    • SHA512

      7b49ac399e534f45f579f5ccf235f6c5bb5a07b20045f64eff20dbd5fb90dd687d24c7f33eb3ce352f2e699edc60370443eb4ad9c367302221ec1db3100af457

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeG:q7Tc2NYHUrAwfMp3CDG

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks