General

  • Target

    50653f3058ff70cfa695dbcb0370357795ed3e2d3eae1f03e831e4150d6614c8.exe

  • Size

    454KB

  • Sample

    250111-hlwlnazjgx

  • MD5

    93fe093020186154dac55862e030f0f2

  • SHA1

    a148ffbb2308f15e20d4cceff5030a0a63841c5d

  • SHA256

    50653f3058ff70cfa695dbcb0370357795ed3e2d3eae1f03e831e4150d6614c8

  • SHA512

    fa6b0e5939d5212d748c883fe72c6cf88869130f24161192450ed18267c1ee0760a5fcfaf378331fbd3823b46c793448d45167bd14470e595a6e6e7490ff68e0

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeR:q7Tc2NYHUrAwfMp3CDR

Malware Config

Targets

    • Target

      50653f3058ff70cfa695dbcb0370357795ed3e2d3eae1f03e831e4150d6614c8.exe

    • Size

      454KB

    • MD5

      93fe093020186154dac55862e030f0f2

    • SHA1

      a148ffbb2308f15e20d4cceff5030a0a63841c5d

    • SHA256

      50653f3058ff70cfa695dbcb0370357795ed3e2d3eae1f03e831e4150d6614c8

    • SHA512

      fa6b0e5939d5212d748c883fe72c6cf88869130f24161192450ed18267c1ee0760a5fcfaf378331fbd3823b46c793448d45167bd14470e595a6e6e7490ff68e0

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeR:q7Tc2NYHUrAwfMp3CDR

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks