General

  • Target

    53df8220bc38607147b39face1985dbb22914a172749c880601e332d2a1b5e40

  • Size

    458KB

  • Sample

    250328-zj32ds1wct

  • MD5

    9683bfdccf3ba351ee2d0e45d1ea2f45

  • SHA1

    007580a6470dbd24a7b3f9446131f132d8107506

  • SHA256

    53df8220bc38607147b39face1985dbb22914a172749c880601e332d2a1b5e40

  • SHA512

    6c7a63b50d39f65117afda202ec37dbfe061631b7821c2fa8f858deb6b960e4f650bdc87880c6b9dc3be4928d4002c1c46f0f869761b9500dcefed105cfb0e81

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbebC:q7Tc2NYHUrAwfMp3CDO

Malware Config

Targets

    • Target

      53df8220bc38607147b39face1985dbb22914a172749c880601e332d2a1b5e40

    • Size

      458KB

    • MD5

      9683bfdccf3ba351ee2d0e45d1ea2f45

    • SHA1

      007580a6470dbd24a7b3f9446131f132d8107506

    • SHA256

      53df8220bc38607147b39face1985dbb22914a172749c880601e332d2a1b5e40

    • SHA512

      6c7a63b50d39f65117afda202ec37dbfe061631b7821c2fa8f858deb6b960e4f650bdc87880c6b9dc3be4928d4002c1c46f0f869761b9500dcefed105cfb0e81

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbebC:q7Tc2NYHUrAwfMp3CDO

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks