General

  • Target

    7d61d0f72e9f741ad30bcaaacc3e0437cb5616c7ceb1f02542da5257892b94d4.exe

  • Size

    454KB

  • Sample

    250108-jgdqqazpdx

  • MD5

    5ea2014faa6a77cd2a1e0fe5355f5ac5

  • SHA1

    9a333bfa94a204dacdcb4053d1db986340dce54e

  • SHA256

    7d61d0f72e9f741ad30bcaaacc3e0437cb5616c7ceb1f02542da5257892b94d4

  • SHA512

    6a846ef06135d9cf33d660755f338f9f622ffd61085dd7ca0e9c7551141964ea7d874d92cdca3ca6406c683f41b371ccfab8a1183372614c24479902b387b95c

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeN:q7Tc2NYHUrAwfMp3CDN

Malware Config

Targets

    • Target

      7d61d0f72e9f741ad30bcaaacc3e0437cb5616c7ceb1f02542da5257892b94d4.exe

    • Size

      454KB

    • MD5

      5ea2014faa6a77cd2a1e0fe5355f5ac5

    • SHA1

      9a333bfa94a204dacdcb4053d1db986340dce54e

    • SHA256

      7d61d0f72e9f741ad30bcaaacc3e0437cb5616c7ceb1f02542da5257892b94d4

    • SHA512

      6a846ef06135d9cf33d660755f338f9f622ffd61085dd7ca0e9c7551141964ea7d874d92cdca3ca6406c683f41b371ccfab8a1183372614c24479902b387b95c

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeN:q7Tc2NYHUrAwfMp3CDN

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks