General

  • Target

    e39b2efd766211adf8b90121b7bd2cb210339eb471cbeba6a43102eb610341b1N.exe

  • Size

    454KB

  • Sample

    250108-ffnyhsvldw

  • MD5

    6c42d60ff6bb6a96bed39b59c89b2630

  • SHA1

    ad0ce6bde386b3f6989d73f26f7ac1754f6079e4

  • SHA256

    e39b2efd766211adf8b90121b7bd2cb210339eb471cbeba6a43102eb610341b1

  • SHA512

    391320b2584d227d533db03e8a33fa3b5b8430c75f7fbd656f38cbcac0a5f186deeed646f62d27e9b5695f0a6e2ebb87a7c859c1e32bbfddb650874892fe1512

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeu:q7Tc2NYHUrAwfMp3CDu

Malware Config

Targets

    • Target

      e39b2efd766211adf8b90121b7bd2cb210339eb471cbeba6a43102eb610341b1N.exe

    • Size

      454KB

    • MD5

      6c42d60ff6bb6a96bed39b59c89b2630

    • SHA1

      ad0ce6bde386b3f6989d73f26f7ac1754f6079e4

    • SHA256

      e39b2efd766211adf8b90121b7bd2cb210339eb471cbeba6a43102eb610341b1

    • SHA512

      391320b2584d227d533db03e8a33fa3b5b8430c75f7fbd656f38cbcac0a5f186deeed646f62d27e9b5695f0a6e2ebb87a7c859c1e32bbfddb650874892fe1512

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeu:q7Tc2NYHUrAwfMp3CDu

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks