General

  • Target

    008eeb77dc15030a134e9192ed12a3d968e9a13aab647a0b6b6f077f9828fd26N.exe

  • Size

    454KB

  • Sample

    250108-jdl8pazney

  • MD5

    f28ff665dc553e1c7fe1439ff331ebd0

  • SHA1

    0e633892c6a6a94f01d16beae87b208b92dd3e08

  • SHA256

    008eeb77dc15030a134e9192ed12a3d968e9a13aab647a0b6b6f077f9828fd26

  • SHA512

    0ce85b33f1de57b99607e253107459713a356bafc5f46bec82debe23f5f3b2b238e85ec521bd990f6bb71bab334129e0278b54fa5b88f02e6c4861cee4274055

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe1C:q7Tc2NYHUrAwfMp3CD1C

Malware Config

Targets

    • Target

      008eeb77dc15030a134e9192ed12a3d968e9a13aab647a0b6b6f077f9828fd26N.exe

    • Size

      454KB

    • MD5

      f28ff665dc553e1c7fe1439ff331ebd0

    • SHA1

      0e633892c6a6a94f01d16beae87b208b92dd3e08

    • SHA256

      008eeb77dc15030a134e9192ed12a3d968e9a13aab647a0b6b6f077f9828fd26

    • SHA512

      0ce85b33f1de57b99607e253107459713a356bafc5f46bec82debe23f5f3b2b238e85ec521bd990f6bb71bab334129e0278b54fa5b88f02e6c4861cee4274055

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe1C:q7Tc2NYHUrAwfMp3CD1C

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks