General

  • Target

    71209d872dc29121b780c02777bc20b75a41455510d9dac84c6e96f99d1bf8f6N.exe

  • Size

    454KB

  • Sample

    250108-hsamrsypc1

  • MD5

    e6fc229733ca0a5aa3bd964c87ecf130

  • SHA1

    c4b510579da34a006f0814855cf5d832deba0a9a

  • SHA256

    71209d872dc29121b780c02777bc20b75a41455510d9dac84c6e96f99d1bf8f6

  • SHA512

    fddd4fcfa7a7e4db4ae5abaa30052acac5f1dcc2c2c0eceaa7fbc92536c90a5928e919346446f95cbc69070167b984e8a1306881d0c5269df6001e74116e0ef4

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbet2:q7Tc2NYHUrAwfMp3CDt2

Malware Config

Targets

    • Target

      71209d872dc29121b780c02777bc20b75a41455510d9dac84c6e96f99d1bf8f6N.exe

    • Size

      454KB

    • MD5

      e6fc229733ca0a5aa3bd964c87ecf130

    • SHA1

      c4b510579da34a006f0814855cf5d832deba0a9a

    • SHA256

      71209d872dc29121b780c02777bc20b75a41455510d9dac84c6e96f99d1bf8f6

    • SHA512

      fddd4fcfa7a7e4db4ae5abaa30052acac5f1dcc2c2c0eceaa7fbc92536c90a5928e919346446f95cbc69070167b984e8a1306881d0c5269df6001e74116e0ef4

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbet2:q7Tc2NYHUrAwfMp3CDt2

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks