General

  • Target

    15a8006adb995b24a00dd5673da12abc5ed786db61a30e2608360d01c2b629e7.exe

  • Size

    455KB

  • Sample

    250127-scxgpsvkem

  • MD5

    1194e2927e963b7b67d781cca42ce9af

  • SHA1

    90342778d243255dd24a2bbc4d0c37cb39952c13

  • SHA256

    15a8006adb995b24a00dd5673da12abc5ed786db61a30e2608360d01c2b629e7

  • SHA512

    b4749c266dfa3037e6eb09922cdbc292cfd1ffd594dc1bee178980dd6ad48508f93975b5dedc5826fa42aaa50ef96c7b54e6543e9658b964dd961d566aa803a3

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbed:q7Tc2NYHUrAwfMp3CDd

Malware Config

Targets

    • Target

      15a8006adb995b24a00dd5673da12abc5ed786db61a30e2608360d01c2b629e7.exe

    • Size

      455KB

    • MD5

      1194e2927e963b7b67d781cca42ce9af

    • SHA1

      90342778d243255dd24a2bbc4d0c37cb39952c13

    • SHA256

      15a8006adb995b24a00dd5673da12abc5ed786db61a30e2608360d01c2b629e7

    • SHA512

      b4749c266dfa3037e6eb09922cdbc292cfd1ffd594dc1bee178980dd6ad48508f93975b5dedc5826fa42aaa50ef96c7b54e6543e9658b964dd961d566aa803a3

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbed:q7Tc2NYHUrAwfMp3CDd

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks