General

  • Target

    adb38e054c14787d3ec20185531ceb0d6f64a5ebe772a1619ee7b57e68e94535

  • Size

    455KB

  • Sample

    250120-k148fs1qhz

  • MD5

    1cf07a7bc29c0b69fa0714ea16ac1cd6

  • SHA1

    5cec6275f73ff29a9fe31319de813b6eccd9929f

  • SHA256

    adb38e054c14787d3ec20185531ceb0d6f64a5ebe772a1619ee7b57e68e94535

  • SHA512

    61c7b3d5ccc942c546ed4ce1989987577e011c8bed7ea81d487787715ae1b7a44b016ed170927d9f5b4e72a6c537c874b83894015ab98eed8868dc397b7e2c16

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeoc:q7Tc2NYHUrAwfMp3CDR

Malware Config

Targets

    • Target

      adb38e054c14787d3ec20185531ceb0d6f64a5ebe772a1619ee7b57e68e94535

    • Size

      455KB

    • MD5

      1cf07a7bc29c0b69fa0714ea16ac1cd6

    • SHA1

      5cec6275f73ff29a9fe31319de813b6eccd9929f

    • SHA256

      adb38e054c14787d3ec20185531ceb0d6f64a5ebe772a1619ee7b57e68e94535

    • SHA512

      61c7b3d5ccc942c546ed4ce1989987577e011c8bed7ea81d487787715ae1b7a44b016ed170927d9f5b4e72a6c537c874b83894015ab98eed8868dc397b7e2c16

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeoc:q7Tc2NYHUrAwfMp3CDR

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks