General

  • Target

    62299871a1d50c8dd28440f85bd2ab02ee890fa26749a5d55144b4e20ada9c21

  • Size

    457KB

  • Sample

    250412-3zdm8atpv7

  • MD5

    b6eabf1d8d029baffd1157a4b3935db2

  • SHA1

    0b6804b5951c4d6075d34b8e12e081a027c5cbda

  • SHA256

    62299871a1d50c8dd28440f85bd2ab02ee890fa26749a5d55144b4e20ada9c21

  • SHA512

    830b4fde8333778ee69cb4bc8b03766efb4feeb5425e3851de69155ed15eace7a6d31bb6ec694d6fd0c577027026172a18084e304e974b1e102dcfc501a2a883

  • SSDEEP

    6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe1v:q7Tc2NYHUrAwfMp3CD1v

Malware Config

Targets

    • Target

      62299871a1d50c8dd28440f85bd2ab02ee890fa26749a5d55144b4e20ada9c21

    • Size

      457KB

    • MD5

      b6eabf1d8d029baffd1157a4b3935db2

    • SHA1

      0b6804b5951c4d6075d34b8e12e081a027c5cbda

    • SHA256

      62299871a1d50c8dd28440f85bd2ab02ee890fa26749a5d55144b4e20ada9c21

    • SHA512

      830b4fde8333778ee69cb4bc8b03766efb4feeb5425e3851de69155ed15eace7a6d31bb6ec694d6fd0c577027026172a18084e304e974b1e102dcfc501a2a883

    • SSDEEP

      6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe1v:q7Tc2NYHUrAwfMp3CD1v

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks