General

  • Target

    02699b7e90388609a90f59501ddefc17dc1a754f156802394481c34ada924708.exe

  • Size

    454KB

  • Sample

    250108-hrp13aypav

  • MD5

    eb544e0c0c823036716a71025c90ad1c

  • SHA1

    0b1ba57e4c4712bac7c14500f451c909acf49e1a

  • SHA256

    02699b7e90388609a90f59501ddefc17dc1a754f156802394481c34ada924708

  • SHA512

    c5bf903802f615e04afce50232b149db183f8b4e209944a7845419bf851aa22246245fc6ffdea865890977fd7bba1b9b5b9d881e04f1affc30851b82dad8da0c

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbej:q7Tc2NYHUrAwfMp3CDj

Malware Config

Targets

    • Target

      02699b7e90388609a90f59501ddefc17dc1a754f156802394481c34ada924708.exe

    • Size

      454KB

    • MD5

      eb544e0c0c823036716a71025c90ad1c

    • SHA1

      0b1ba57e4c4712bac7c14500f451c909acf49e1a

    • SHA256

      02699b7e90388609a90f59501ddefc17dc1a754f156802394481c34ada924708

    • SHA512

      c5bf903802f615e04afce50232b149db183f8b4e209944a7845419bf851aa22246245fc6ffdea865890977fd7bba1b9b5b9d881e04f1affc30851b82dad8da0c

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbej:q7Tc2NYHUrAwfMp3CDj

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks