General

  • Target

    adcadb69832657c4673c0678d72021c16796516839c66004153be758f2bfeed5

  • Size

    455KB

  • Sample

    250120-k2kv7s1rbs

  • MD5

    7574fc0a1572fdde00fdedfd50cd1185

  • SHA1

    f26a39e92474d33a229570fab2ae3da84717d8d3

  • SHA256

    adcadb69832657c4673c0678d72021c16796516839c66004153be758f2bfeed5

  • SHA512

    86028168a543d043a52ee24890ad5f6b9478d8b765c0a6fd77aca982f2d898e86607f3e776ed6a3150f84df363694a2b97877c47a8bb87905a354d7bcaee707b

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe0K:q7Tc2NYHUrAwfMp3CDJ

Malware Config

Targets

    • Target

      adcadb69832657c4673c0678d72021c16796516839c66004153be758f2bfeed5

    • Size

      455KB

    • MD5

      7574fc0a1572fdde00fdedfd50cd1185

    • SHA1

      f26a39e92474d33a229570fab2ae3da84717d8d3

    • SHA256

      adcadb69832657c4673c0678d72021c16796516839c66004153be758f2bfeed5

    • SHA512

      86028168a543d043a52ee24890ad5f6b9478d8b765c0a6fd77aca982f2d898e86607f3e776ed6a3150f84df363694a2b97877c47a8bb87905a354d7bcaee707b

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe0K:q7Tc2NYHUrAwfMp3CDJ

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks