General

  • Target

    acdaa23b555bd10f57185b4870e68fbfb77248ae73fe915eb9833187604b1b33.exe

  • Size

    454KB

  • Sample

    250108-fvwxnsxqgm

  • MD5

    a66f00e10c6f7b59dc7e1b5308e76e93

  • SHA1

    1659252ea90ca242e507ff0450e56e3242de87f8

  • SHA256

    acdaa23b555bd10f57185b4870e68fbfb77248ae73fe915eb9833187604b1b33

  • SHA512

    9d11748c64aea401fc11d6db83d36a101cab5b1c7ebd000345e16158b41e34b7a4b19628434e91c121cb05948c9e95d67e29a98fcff78c6efb8b1a3f75b76f6f

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbem:q7Tc2NYHUrAwfMp3CDm

Malware Config

Targets

    • Target

      acdaa23b555bd10f57185b4870e68fbfb77248ae73fe915eb9833187604b1b33.exe

    • Size

      454KB

    • MD5

      a66f00e10c6f7b59dc7e1b5308e76e93

    • SHA1

      1659252ea90ca242e507ff0450e56e3242de87f8

    • SHA256

      acdaa23b555bd10f57185b4870e68fbfb77248ae73fe915eb9833187604b1b33

    • SHA512

      9d11748c64aea401fc11d6db83d36a101cab5b1c7ebd000345e16158b41e34b7a4b19628434e91c121cb05948c9e95d67e29a98fcff78c6efb8b1a3f75b76f6f

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbem:q7Tc2NYHUrAwfMp3CDm

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks