General

  • Target

    19b1190642f60f0370b5a3d5dd9132d63754dc57f050f1541fa8ebedb0e4285f.exe

  • Size

    454KB

  • Sample

    250108-hy7vfs1qgk

  • MD5

    b78f3f3a60cf3e45c91adbb2e0e32899

  • SHA1

    1ca46fda3d2ba5d270fe4fd6083cf29e553599d2

  • SHA256

    19b1190642f60f0370b5a3d5dd9132d63754dc57f050f1541fa8ebedb0e4285f

  • SHA512

    d79a955ae0c34b0e0700d33588a7d4afa6e8401dd7884b6c5536ffc4793d5a554deb79b7bd4753fdcc6e716eb6d799b8951326eea6ddc34a6bba2d3b2491975d

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbez:q7Tc2NYHUrAwfMp3CDz

Malware Config

Targets

    • Target

      19b1190642f60f0370b5a3d5dd9132d63754dc57f050f1541fa8ebedb0e4285f.exe

    • Size

      454KB

    • MD5

      b78f3f3a60cf3e45c91adbb2e0e32899

    • SHA1

      1ca46fda3d2ba5d270fe4fd6083cf29e553599d2

    • SHA256

      19b1190642f60f0370b5a3d5dd9132d63754dc57f050f1541fa8ebedb0e4285f

    • SHA512

      d79a955ae0c34b0e0700d33588a7d4afa6e8401dd7884b6c5536ffc4793d5a554deb79b7bd4753fdcc6e716eb6d799b8951326eea6ddc34a6bba2d3b2491975d

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbez:q7Tc2NYHUrAwfMp3CDz

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks