General

  • Target

    58ac7f9e3f872889c0c3e8b3500b5cd38e289ee4e10b450454548fc90bc05b61.exe

  • Size

    455KB

  • Sample

    250120-k16raasjfj

  • MD5

    55046182ee9cc44c8d95de89c37ecc42

  • SHA1

    a65d3c6075d43808d74027812a3a9574d7be4e04

  • SHA256

    58ac7f9e3f872889c0c3e8b3500b5cd38e289ee4e10b450454548fc90bc05b61

  • SHA512

    c4323504809397003d10817e02d51ac5bdc7291580a824dc03cc82e6efc6070ed650d4cc64fc6b924bf0d465c88cca1b49494102e59fd51d5eba6f4015772923

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbez:q7Tc2NYHUrAwfMp3CDz

Malware Config

Targets

    • Target

      58ac7f9e3f872889c0c3e8b3500b5cd38e289ee4e10b450454548fc90bc05b61.exe

    • Size

      455KB

    • MD5

      55046182ee9cc44c8d95de89c37ecc42

    • SHA1

      a65d3c6075d43808d74027812a3a9574d7be4e04

    • SHA256

      58ac7f9e3f872889c0c3e8b3500b5cd38e289ee4e10b450454548fc90bc05b61

    • SHA512

      c4323504809397003d10817e02d51ac5bdc7291580a824dc03cc82e6efc6070ed650d4cc64fc6b924bf0d465c88cca1b49494102e59fd51d5eba6f4015772923

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbez:q7Tc2NYHUrAwfMp3CDz

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks