General

  • Target

    bbd411989b7ce341847f2da1e23cef0f7bb3539566e72a8c249a6c88cbcb1281

  • Size

    454KB

  • Sample

    250108-h27zmazje1

  • MD5

    097bdd3c15eed55665edb40dc8b4704e

  • SHA1

    9a1188d3d5de91d9678605cef1e5012a6586dbde

  • SHA256

    bbd411989b7ce341847f2da1e23cef0f7bb3539566e72a8c249a6c88cbcb1281

  • SHA512

    c0924a2735b18a9080fdcbef15c72f3705a60704e52f0386ecc635f2839afbac5e7cf8bf2cdd4a7051cf7081374c9f5d2a0e8d7860e86a4e3f440cda6b92b824

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbev:q7Tc2NYHUrAwfMp3CDv

Malware Config

Targets

    • Target

      bbd411989b7ce341847f2da1e23cef0f7bb3539566e72a8c249a6c88cbcb1281

    • Size

      454KB

    • MD5

      097bdd3c15eed55665edb40dc8b4704e

    • SHA1

      9a1188d3d5de91d9678605cef1e5012a6586dbde

    • SHA256

      bbd411989b7ce341847f2da1e23cef0f7bb3539566e72a8c249a6c88cbcb1281

    • SHA512

      c0924a2735b18a9080fdcbef15c72f3705a60704e52f0386ecc635f2839afbac5e7cf8bf2cdd4a7051cf7081374c9f5d2a0e8d7860e86a4e3f440cda6b92b824

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbev:q7Tc2NYHUrAwfMp3CDv

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks