General

  • Target
    acee8f9d1f4ea6b8f377d3af86a5499193c8b5954c5105dcae11944a5aeec05d
  • Size 1.6MB
  • Sample260425-lxtg8aev7y
  • SHA256 acee8f9d1f4ea6b8f377d3af86a5499193c8b5954c5105dcae11944a5aeec05d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      acee8f9d1f4ea6b8f377d3af86a5499193c8b5954c5105dcae11944a5aeec05d
    • Size 1.6MB
    • SHA256 acee8f9d1f4ea6b8f377d3af86a5499193c8b5954c5105dcae11944a5aeec05d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect Blackmoon payload

    • Family: Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks