General

  • Target

    6170bf2d446afadcb82de1c887497b9e19809379111dfa7642e904957e2443ca

  • Size

    459KB

  • Sample

    250412-3xqvrstyct

  • MD5

    8570eec6e9bdf9952afd0fbe7e75b862

  • SHA1

    fe93b0f56643df1bfcc712c2e0f11b1d028bbb4f

  • SHA256

    6170bf2d446afadcb82de1c887497b9e19809379111dfa7642e904957e2443ca

  • SHA512

    241a505e822e8aa5b4f4d31cb12a4f3fe6a8110c8d4b3bf8cf516241aead9dd76ef939ab75ba29b5e63b9c636b1e33fcc21fb9ae48b266373f6c9183f243d23c

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeU:q7Tc2NYHUrAwfMp3CDU

Malware Config

Targets

    • Target

      6170bf2d446afadcb82de1c887497b9e19809379111dfa7642e904957e2443ca

    • Size

      459KB

    • MD5

      8570eec6e9bdf9952afd0fbe7e75b862

    • SHA1

      fe93b0f56643df1bfcc712c2e0f11b1d028bbb4f

    • SHA256

      6170bf2d446afadcb82de1c887497b9e19809379111dfa7642e904957e2443ca

    • SHA512

      241a505e822e8aa5b4f4d31cb12a4f3fe6a8110c8d4b3bf8cf516241aead9dd76ef939ab75ba29b5e63b9c636b1e33fcc21fb9ae48b266373f6c9183f243d23c

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbeU:q7Tc2NYHUrAwfMp3CDU

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks