General

  • Target

    9fe96390c662c6a0beb0400021a0992121c60850c3ff747092885e99054b1044.exe

  • Size

    456KB

  • Sample

    250120-k2954a1rdt

  • MD5

    176eced5095c86332092a002acc2418e

  • SHA1

    8b9b9d78a68c148f802f833ef3458b658e973773

  • SHA256

    9fe96390c662c6a0beb0400021a0992121c60850c3ff747092885e99054b1044

  • SHA512

    115c0ae096f7bb97e643f7bc51f467880c9b271cf2f0a2019e142cae3c4c69657210f1bfebba7b69da4f940cfe720503684c274890d5823827ecdbd9af9d5113

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAben:q7Tc2NYHUrAwfMp3CDn

Malware Config

Targets

    • Target

      9fe96390c662c6a0beb0400021a0992121c60850c3ff747092885e99054b1044.exe

    • Size

      456KB

    • MD5

      176eced5095c86332092a002acc2418e

    • SHA1

      8b9b9d78a68c148f802f833ef3458b658e973773

    • SHA256

      9fe96390c662c6a0beb0400021a0992121c60850c3ff747092885e99054b1044

    • SHA512

      115c0ae096f7bb97e643f7bc51f467880c9b271cf2f0a2019e142cae3c4c69657210f1bfebba7b69da4f940cfe720503684c274890d5823827ecdbd9af9d5113

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAben:q7Tc2NYHUrAwfMp3CDn

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks