General

  • Target

    706ee2a674518f82194d506b2ba0ece201219f5fba0cc80ad9fbed44898a5113.exe

  • Size

    456KB

  • Sample

    250108-fybqxawjbw

  • MD5

    6202190189b80f0e317461e4661e9f56

  • SHA1

    228982d958245f5b621e06b5b56e4d444fff65a6

  • SHA256

    706ee2a674518f82194d506b2ba0ece201219f5fba0cc80ad9fbed44898a5113

  • SHA512

    f190374479817a933358baa734033439f2084fee0e3ea9dae154d3a9e3e2d77a5f5dce0afc44ab0eb31fd059a6614d7a78671d8c09005b0f927bc40c70636922

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRp:q7Tc2NYHUrAwfMp3CDRp

Malware Config

Targets

    • Target

      706ee2a674518f82194d506b2ba0ece201219f5fba0cc80ad9fbed44898a5113.exe

    • Size

      456KB

    • MD5

      6202190189b80f0e317461e4661e9f56

    • SHA1

      228982d958245f5b621e06b5b56e4d444fff65a6

    • SHA256

      706ee2a674518f82194d506b2ba0ece201219f5fba0cc80ad9fbed44898a5113

    • SHA512

      f190374479817a933358baa734033439f2084fee0e3ea9dae154d3a9e3e2d77a5f5dce0afc44ab0eb31fd059a6614d7a78671d8c09005b0f927bc40c70636922

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeRp:q7Tc2NYHUrAwfMp3CDRp

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks