General

  • Target

    3570049a5bb434e65a6ed4ff09d85b7c99ae389c7c1797089515c6ca9b3f6bf5.exe

  • Size

    454KB

  • Sample

    250108-fy2bkawjdv

  • MD5

    a99acae0fa63c3ce82d0116c26595f8e

  • SHA1

    8edc48f74a26764582b02faba6cb546cdb94e05c

  • SHA256

    3570049a5bb434e65a6ed4ff09d85b7c99ae389c7c1797089515c6ca9b3f6bf5

  • SHA512

    e75301206cbfc450435c385b32300cbd2e61d618b2252ace4109c140ed9f237056369660a3cb10e5f3a13a3f04647ddbf9a8cf9f16b3e342dfd7c013db369bf0

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe3:q7Tc2NYHUrAwfMp3CD3

Malware Config

Targets

    • Target

      3570049a5bb434e65a6ed4ff09d85b7c99ae389c7c1797089515c6ca9b3f6bf5.exe

    • Size

      454KB

    • MD5

      a99acae0fa63c3ce82d0116c26595f8e

    • SHA1

      8edc48f74a26764582b02faba6cb546cdb94e05c

    • SHA256

      3570049a5bb434e65a6ed4ff09d85b7c99ae389c7c1797089515c6ca9b3f6bf5

    • SHA512

      e75301206cbfc450435c385b32300cbd2e61d618b2252ace4109c140ed9f237056369660a3cb10e5f3a13a3f04647ddbf9a8cf9f16b3e342dfd7c013db369bf0

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe3:q7Tc2NYHUrAwfMp3CD3

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks