General

  • Target

    d117255d1e4beeef7ea3de8a9748e583ac8be231a7b1dd5ca2c891e59df1555c

  • Size

    455KB

  • Sample

    250111-hlggqszjfx

  • MD5

    1ef700550d015262c8212fde8a90d87f

  • SHA1

    3e7532f98a6cdc94269989e8664cd73e31c69c82

  • SHA256

    d117255d1e4beeef7ea3de8a9748e583ac8be231a7b1dd5ca2c891e59df1555c

  • SHA512

    fc3327a1bd16a2455c2a5a6e40771ce7cfb9e4fb009e86cb7a1ab9de265b2eb46a68053a97e23232540da8dad138770b7e6d3035442be6bc03cbce94b0cb115b

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe6gIW:q7Tc2NYHUrAwfMp3CD6tW

Malware Config

Targets

    • Target

      d117255d1e4beeef7ea3de8a9748e583ac8be231a7b1dd5ca2c891e59df1555c

    • Size

      455KB

    • MD5

      1ef700550d015262c8212fde8a90d87f

    • SHA1

      3e7532f98a6cdc94269989e8664cd73e31c69c82

    • SHA256

      d117255d1e4beeef7ea3de8a9748e583ac8be231a7b1dd5ca2c891e59df1555c

    • SHA512

      fc3327a1bd16a2455c2a5a6e40771ce7cfb9e4fb009e86cb7a1ab9de265b2eb46a68053a97e23232540da8dad138770b7e6d3035442be6bc03cbce94b0cb115b

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe6gIW:q7Tc2NYHUrAwfMp3CD6tW

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks