General

  • Target

    0a92bcb4e81042864a5246db3e70022c20fc619d023f7782ff75d43ebb581d5eN.exe

  • Size

    454KB

  • Sample

    250108-h7m7eazlb1

  • MD5

    c792b5ba0f3418a01c910352f5783ff0

  • SHA1

    4da115c9bee81ec3e11367a57fa5f03f747de1f3

  • SHA256

    0a92bcb4e81042864a5246db3e70022c20fc619d023f7782ff75d43ebb581d5e

  • SHA512

    aa13906156c9e8915ba2523ec6db149def34d67b0a07ccc07a2a3a0ec05fe1d0b5de71e224cea1d1ccaa376026809d482780aed2a78a48cdc6a09abf665b1188

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAber7:q7Tc2NYHUrAwfMp3CDH

Malware Config

Targets

    • Target

      0a92bcb4e81042864a5246db3e70022c20fc619d023f7782ff75d43ebb581d5eN.exe

    • Size

      454KB

    • MD5

      c792b5ba0f3418a01c910352f5783ff0

    • SHA1

      4da115c9bee81ec3e11367a57fa5f03f747de1f3

    • SHA256

      0a92bcb4e81042864a5246db3e70022c20fc619d023f7782ff75d43ebb581d5e

    • SHA512

      aa13906156c9e8915ba2523ec6db149def34d67b0a07ccc07a2a3a0ec05fe1d0b5de71e224cea1d1ccaa376026809d482780aed2a78a48cdc6a09abf665b1188

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAber7:q7Tc2NYHUrAwfMp3CDH

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks