General

  • Target

    9d4a64a438d83c7e3970e3be6941abce9da45071de01cc297b96e661555cc205.exe

  • Size

    454KB

  • Sample

    250108-jmq81azrfy

  • MD5

    daf577deea6d223fc38cb0a3e1ea5d2d

  • SHA1

    cd16ca63f3b82d5c7e1d51ca83fed1dc5a9cf46a

  • SHA256

    9d4a64a438d83c7e3970e3be6941abce9da45071de01cc297b96e661555cc205

  • SHA512

    ae2b1d944bf73f0b3246da67d12ddce69ee21f99c56b1386e8860fd69902b9999cb87681ba3114d85726eb608f2648b0c88cf72c47a85020066d4d879a0a2966

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbep:q7Tc2NYHUrAwfMp3CDp

Malware Config

Targets

    • Target

      9d4a64a438d83c7e3970e3be6941abce9da45071de01cc297b96e661555cc205.exe

    • Size

      454KB

    • MD5

      daf577deea6d223fc38cb0a3e1ea5d2d

    • SHA1

      cd16ca63f3b82d5c7e1d51ca83fed1dc5a9cf46a

    • SHA256

      9d4a64a438d83c7e3970e3be6941abce9da45071de01cc297b96e661555cc205

    • SHA512

      ae2b1d944bf73f0b3246da67d12ddce69ee21f99c56b1386e8860fd69902b9999cb87681ba3114d85726eb608f2648b0c88cf72c47a85020066d4d879a0a2966

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbep:q7Tc2NYHUrAwfMp3CDp

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks