General

  • Target

    62b1c114efa89f56dd1674f9053c0789b7f5da9ede566af0d9deda37540805fa.exe

  • Size

    454KB

  • Sample

    250120-laf9dasmgn

  • MD5

    37c4e6afc1ee892fed3257e783c5b961

  • SHA1

    fbb22ac345c9ce2eae1d37996a8119b1c0f3f3bf

  • SHA256

    62b1c114efa89f56dd1674f9053c0789b7f5da9ede566af0d9deda37540805fa

  • SHA512

    a0479bbb155fa605127a4bba8ae740f5136bd0981e5919328ef33fa729f483eef82da94a89065c98c9e5e256fbb396fe74f572eeecd8a6e2cebc4ced06899ae1

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAben:q7Tc2NYHUrAwfMp3CDn

Malware Config

Targets

    • Target

      62b1c114efa89f56dd1674f9053c0789b7f5da9ede566af0d9deda37540805fa.exe

    • Size

      454KB

    • MD5

      37c4e6afc1ee892fed3257e783c5b961

    • SHA1

      fbb22ac345c9ce2eae1d37996a8119b1c0f3f3bf

    • SHA256

      62b1c114efa89f56dd1674f9053c0789b7f5da9ede566af0d9deda37540805fa

    • SHA512

      a0479bbb155fa605127a4bba8ae740f5136bd0981e5919328ef33fa729f483eef82da94a89065c98c9e5e256fbb396fe74f572eeecd8a6e2cebc4ced06899ae1

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAben:q7Tc2NYHUrAwfMp3CDn

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks