General

  • Target

    78ec5b349195fa78b806721dcba99071289d78a032614833de42a57789f938e1N.exe

  • Size

    454KB

  • Sample

    250108-fxz24swjaw

  • MD5

    3cfc1a41f141b638e8537751874cd9c0

  • SHA1

    45792cf9212119f38a24b70027fb4410101c8de2

  • SHA256

    78ec5b349195fa78b806721dcba99071289d78a032614833de42a57789f938e1

  • SHA512

    dadebe3d915238494c25658699d9b39ecad7fe5ebe532bd7fd59c136c4d84414ec1c3690475b1b3086ae06eb322ddb2c065093f0287996ce028bec268b105797

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeJT:q7Tc2NYHUrAwfMp3CDJT

Malware Config

Targets

    • Target

      78ec5b349195fa78b806721dcba99071289d78a032614833de42a57789f938e1N.exe

    • Size

      454KB

    • MD5

      3cfc1a41f141b638e8537751874cd9c0

    • SHA1

      45792cf9212119f38a24b70027fb4410101c8de2

    • SHA256

      78ec5b349195fa78b806721dcba99071289d78a032614833de42a57789f938e1

    • SHA512

      dadebe3d915238494c25658699d9b39ecad7fe5ebe532bd7fd59c136c4d84414ec1c3690475b1b3086ae06eb322ddb2c065093f0287996ce028bec268b105797

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeJT:q7Tc2NYHUrAwfMp3CDJT

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks