General

  • Target

    ee09aac40f4f552c8588dc8f59fd6a21e732b488c44f9681f3b17f9433716205N.exe

  • Size

    454KB

  • Sample

    250108-jnxgeasqhm

  • MD5

    6c359f162c67527b1119b6bce36775b0

  • SHA1

    2cd12d978940d2efbdcfa1a7bc402bb5dbbcfbf5

  • SHA256

    ee09aac40f4f552c8588dc8f59fd6a21e732b488c44f9681f3b17f9433716205

  • SHA512

    b8a39b7ae03296824e3e1765898a2d6b1f950f4191960891b0373cc55f3b3a88ed94d5186d2ad7e35588c3c7d385baae29432c1bc8a3eadb2d8494bc47ffc0a8

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeN:q7Tc2NYHUrAwfMp3CDN

Malware Config

Targets

    • Target

      ee09aac40f4f552c8588dc8f59fd6a21e732b488c44f9681f3b17f9433716205N.exe

    • Size

      454KB

    • MD5

      6c359f162c67527b1119b6bce36775b0

    • SHA1

      2cd12d978940d2efbdcfa1a7bc402bb5dbbcfbf5

    • SHA256

      ee09aac40f4f552c8588dc8f59fd6a21e732b488c44f9681f3b17f9433716205

    • SHA512

      b8a39b7ae03296824e3e1765898a2d6b1f950f4191960891b0373cc55f3b3a88ed94d5186d2ad7e35588c3c7d385baae29432c1bc8a3eadb2d8494bc47ffc0a8

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeN:q7Tc2NYHUrAwfMp3CDN

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks