General

  • Target

    8b41575f96493c7f892aca783009e11a3703db1153bd05cc7afd4f9409e2be01

  • Size

    152KB

  • Sample

    240630-31qzyazcpb

  • MD5

    7bcd5798fdab5d47b2e11443014a9277

  • SHA1

    b13d46e96acad51f5a9302232b3077991cdf4976

  • SHA256

    8b41575f96493c7f892aca783009e11a3703db1153bd05cc7afd4f9409e2be01

  • SHA512

    b5846f52bcc7fd0683856dd1b33b63899831f921cea393a6ebc8d4d32b438db4d22a7956fe34cadb75fb4d0b5881e148ad2402a85fdeb9a622da12dc2eedd2fc

  • SSDEEP

    3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BWlPFH4tpU:kcm4FmowdHoSphraHcpOFltH4tpU

Malware Config

Targets

    • Target

      8b41575f96493c7f892aca783009e11a3703db1153bd05cc7afd4f9409e2be01

    • Size

      152KB

    • MD5

      7bcd5798fdab5d47b2e11443014a9277

    • SHA1

      b13d46e96acad51f5a9302232b3077991cdf4976

    • SHA256

      8b41575f96493c7f892aca783009e11a3703db1153bd05cc7afd4f9409e2be01

    • SHA512

      b5846f52bcc7fd0683856dd1b33b63899831f921cea393a6ebc8d4d32b438db4d22a7956fe34cadb75fb4d0b5881e148ad2402a85fdeb9a622da12dc2eedd2fc

    • SSDEEP

      3072:khOmTsF93UYfwC6GIoutpYcvrqrE66kropO6BWlPFH4tpU:kcm4FmowdHoSphraHcpOFltH4tpU

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks