General

  • Target

    c85d0eeb183d57b9896ea19aaf4c60e5152eb8e0b873baa289aed1c520fe59e7.exe

  • Size

    454KB

  • Sample

    250127-scyprstnfv

  • MD5

    18ac9ed3248f849193beed8c9d28093a

  • SHA1

    df1e93347774ff7f9f6bdfc2aeae8a365aa9ba8f

  • SHA256

    c85d0eeb183d57b9896ea19aaf4c60e5152eb8e0b873baa289aed1c520fe59e7

  • SHA512

    f8f355b18ff343bd9ea55abab7c376bfae754feb55b16a2b5bfa72fcc19c59157b30ab93a3eba44a5cc646af1b849b46631a6ee3cb872b97b51d017174de3027

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbec:q7Tc2NYHUrAwfMp3CDc

Malware Config

Targets

    • Target

      c85d0eeb183d57b9896ea19aaf4c60e5152eb8e0b873baa289aed1c520fe59e7.exe

    • Size

      454KB

    • MD5

      18ac9ed3248f849193beed8c9d28093a

    • SHA1

      df1e93347774ff7f9f6bdfc2aeae8a365aa9ba8f

    • SHA256

      c85d0eeb183d57b9896ea19aaf4c60e5152eb8e0b873baa289aed1c520fe59e7

    • SHA512

      f8f355b18ff343bd9ea55abab7c376bfae754feb55b16a2b5bfa72fcc19c59157b30ab93a3eba44a5cc646af1b849b46631a6ee3cb872b97b51d017174de3027

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbec:q7Tc2NYHUrAwfMp3CDc

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks