General

  • Target

    c47e8046b204248220c8aa0ecc5925a8f70bfae42b3e91f21ffa8aa61f39f872

  • Size

    455KB

  • Sample

    250108-jm7kzszrht

  • MD5

    dbcdb5d745dd111664bb7a3a1926eae4

  • SHA1

    e1069fedd7457bbfab8e28cc5bbf53ad34bdee38

  • SHA256

    c47e8046b204248220c8aa0ecc5925a8f70bfae42b3e91f21ffa8aa61f39f872

  • SHA512

    f55ce65eabbbc7928689ca2829d02ffe3c5fc9dde8e6b55fddb4dad2edd51f313e2756982f5cbe258a412e71dc306ee3c100959cdaef6c09ff9fbcbd9d1659eb

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeTh:q7Tc2NYHUrAwfMp3CDd

Malware Config

Targets

    • Target

      c47e8046b204248220c8aa0ecc5925a8f70bfae42b3e91f21ffa8aa61f39f872

    • Size

      455KB

    • MD5

      dbcdb5d745dd111664bb7a3a1926eae4

    • SHA1

      e1069fedd7457bbfab8e28cc5bbf53ad34bdee38

    • SHA256

      c47e8046b204248220c8aa0ecc5925a8f70bfae42b3e91f21ffa8aa61f39f872

    • SHA512

      f55ce65eabbbc7928689ca2829d02ffe3c5fc9dde8e6b55fddb4dad2edd51f313e2756982f5cbe258a412e71dc306ee3c100959cdaef6c09ff9fbcbd9d1659eb

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeTh:q7Tc2NYHUrAwfMp3CDd

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks