General

  • Target

    39a9b6041d82b6192936ba8440bb56192040c46cc52bdf76077fdf8cf007ef66.exe

  • Size

    454KB

  • Sample

    250120-kzfhps1qc1

  • MD5

    a5931e7aba0778a843ed154001c8e704

  • SHA1

    ecac23978227958fc9e1e2329b85601fc9175807

  • SHA256

    39a9b6041d82b6192936ba8440bb56192040c46cc52bdf76077fdf8cf007ef66

  • SHA512

    2ac24cae18528a7abf42f4606da36c73a17f4a5bfd4939276ed08239809e2011d3bc171a51e368038cdec9f841bec70e214c0b020e550fedae577f94e1b41d59

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeX:q7Tc2NYHUrAwfMp3CDX

Malware Config

Targets

    • Target

      39a9b6041d82b6192936ba8440bb56192040c46cc52bdf76077fdf8cf007ef66.exe

    • Size

      454KB

    • MD5

      a5931e7aba0778a843ed154001c8e704

    • SHA1

      ecac23978227958fc9e1e2329b85601fc9175807

    • SHA256

      39a9b6041d82b6192936ba8440bb56192040c46cc52bdf76077fdf8cf007ef66

    • SHA512

      2ac24cae18528a7abf42f4606da36c73a17f4a5bfd4939276ed08239809e2011d3bc171a51e368038cdec9f841bec70e214c0b020e550fedae577f94e1b41d59

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeX:q7Tc2NYHUrAwfMp3CDX

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks