General

  • Target

    f0af726699fda887a8a1457ef1e698507e3e1e83873dc82b604c4e3d5f88ae8dN.exe

  • Size

    454KB

  • Sample

    250108-hnnzlayna1

  • MD5

    6a1b3c2572084b34f4e452b3f0d34810

  • SHA1

    a8fdb32b5db486aa1ae522f069ce907162d64faf

  • SHA256

    f0af726699fda887a8a1457ef1e698507e3e1e83873dc82b604c4e3d5f88ae8d

  • SHA512

    08d0823e5e89be746ff1a672ff6366bc9ef1fcfaae664bbbf8a9ee778b1be2ebe50615e10d67ebf69852bc47e262f522e5f2be112d40a8cda0ce9e16ca4289bb

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeX:q7Tc2NYHUrAwfMp3CDX

Malware Config

Targets

    • Target

      f0af726699fda887a8a1457ef1e698507e3e1e83873dc82b604c4e3d5f88ae8dN.exe

    • Size

      454KB

    • MD5

      6a1b3c2572084b34f4e452b3f0d34810

    • SHA1

      a8fdb32b5db486aa1ae522f069ce907162d64faf

    • SHA256

      f0af726699fda887a8a1457ef1e698507e3e1e83873dc82b604c4e3d5f88ae8d

    • SHA512

      08d0823e5e89be746ff1a672ff6366bc9ef1fcfaae664bbbf8a9ee778b1be2ebe50615e10d67ebf69852bc47e262f522e5f2be112d40a8cda0ce9e16ca4289bb

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeX:q7Tc2NYHUrAwfMp3CDX

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks