General

  • Target

    f58f4514626ceaba702e55abe0cde7029b93d932d2f933d6ab2b5fde8d562d30N.exe

  • Size

    454KB

  • Sample

    250108-jd6x4asmbn

  • MD5

    57f8dbf600286cb6cf5e966a541f8700

  • SHA1

    0e256f952d78bd537dec1629995322e1b732ed6f

  • SHA256

    f58f4514626ceaba702e55abe0cde7029b93d932d2f933d6ab2b5fde8d562d30

  • SHA512

    074fc83d6afc8551519f84f4b414de1e8cddde9a5e90161d253c20f025660b9a885566d6296b41e53e0e915b32e152e029bad3f73c9744efbadfc9be080b0a21

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe3:q7Tc2NYHUrAwfMp3CD3

Malware Config

Targets

    • Target

      f58f4514626ceaba702e55abe0cde7029b93d932d2f933d6ab2b5fde8d562d30N.exe

    • Size

      454KB

    • MD5

      57f8dbf600286cb6cf5e966a541f8700

    • SHA1

      0e256f952d78bd537dec1629995322e1b732ed6f

    • SHA256

      f58f4514626ceaba702e55abe0cde7029b93d932d2f933d6ab2b5fde8d562d30

    • SHA512

      074fc83d6afc8551519f84f4b414de1e8cddde9a5e90161d253c20f025660b9a885566d6296b41e53e0e915b32e152e029bad3f73c9744efbadfc9be080b0a21

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe3:q7Tc2NYHUrAwfMp3CD3

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks