General

  • Target

    7530e580b3181d1b4666e35e38c2a86cefa70b423d9d3157da24f3ca1aca9246

  • Size

    458KB

  • Sample

    250303-a6rt7s1mw8

  • MD5

    31b9d1c1827de7e1e430118a2b792b22

  • SHA1

    ba3567bfda29ce02ce684ccb3ef5f246bb09b4e2

  • SHA256

    7530e580b3181d1b4666e35e38c2a86cefa70b423d9d3157da24f3ca1aca9246

  • SHA512

    3433f211e71d3e450f67e1969286ecd47906dff2ed228599c5a5a5fc0256c8f3386c1de876078dc85fe08b8dc4ab974dcda86208f838ce032d6a3d6fd9f1cf1b

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeuK:q7Tc2NYHUrAwfMp3CDt

Malware Config

Targets

    • Target

      7530e580b3181d1b4666e35e38c2a86cefa70b423d9d3157da24f3ca1aca9246

    • Size

      458KB

    • MD5

      31b9d1c1827de7e1e430118a2b792b22

    • SHA1

      ba3567bfda29ce02ce684ccb3ef5f246bb09b4e2

    • SHA256

      7530e580b3181d1b4666e35e38c2a86cefa70b423d9d3157da24f3ca1aca9246

    • SHA512

      3433f211e71d3e450f67e1969286ecd47906dff2ed228599c5a5a5fc0256c8f3386c1de876078dc85fe08b8dc4ab974dcda86208f838ce032d6a3d6fd9f1cf1b

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeuK:q7Tc2NYHUrAwfMp3CDt

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks