General

  • Target

    5698484ea82c3111193fad5882f57b08ef7de12a7d6e42c1506f46a7ea2c6b4f

  • Size

    457KB

  • Sample

    250328-zzgs4asrx6

  • MD5

    66900a973f941e9a8af51fe715e4a112

  • SHA1

    3903ee28689e8fad2d6bbc1a7b9363992929fafa

  • SHA256

    5698484ea82c3111193fad5882f57b08ef7de12a7d6e42c1506f46a7ea2c6b4f

  • SHA512

    a7b11736757d757570efe5cf50bdbe96ff13e314bf6e5203dcf6b9c300b3daf75916c85b8e3f9d5ea8e51a8f71f62da8ec05637056abb8a241b6288e586e7b95

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeSc:q7Tc2NYHUrAwfMp3CDF

Malware Config

Targets

    • Target

      5698484ea82c3111193fad5882f57b08ef7de12a7d6e42c1506f46a7ea2c6b4f

    • Size

      457KB

    • MD5

      66900a973f941e9a8af51fe715e4a112

    • SHA1

      3903ee28689e8fad2d6bbc1a7b9363992929fafa

    • SHA256

      5698484ea82c3111193fad5882f57b08ef7de12a7d6e42c1506f46a7ea2c6b4f

    • SHA512

      a7b11736757d757570efe5cf50bdbe96ff13e314bf6e5203dcf6b9c300b3daf75916c85b8e3f9d5ea8e51a8f71f62da8ec05637056abb8a241b6288e586e7b95

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeSc:q7Tc2NYHUrAwfMp3CDF

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks