General

  • Target

    85c3b09ed6b8045d15b5a71fdffdd9bc748c04099f77a990e786cc6c125ba4b2

  • Size

    107KB

  • Sample

    240704-3xsz5aygjf

  • MD5

    0a5c55c0001724de20a941904ab84aea

  • SHA1

    bd761c8b1e91799acd0dc60b2510a15e75c0ee1a

  • SHA256

    85c3b09ed6b8045d15b5a71fdffdd9bc748c04099f77a990e786cc6c125ba4b2

  • SHA512

    cedcdaebc1513b534293adc18fc82a7e42d54fca797caeab24021e6096b71880f92cbd685566650c894bbe9f5aab3e01a46ddd00fa5f14490ca9ce10b7ecb2e0

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoTNKDeS98hPUdHV7RNzfJN7pFX:ymb3NkkiQ3mdBjFo5KDe88g1fD7jX

Malware Config

Targets

    • Target

      85c3b09ed6b8045d15b5a71fdffdd9bc748c04099f77a990e786cc6c125ba4b2

    • Size

      107KB

    • MD5

      0a5c55c0001724de20a941904ab84aea

    • SHA1

      bd761c8b1e91799acd0dc60b2510a15e75c0ee1a

    • SHA256

      85c3b09ed6b8045d15b5a71fdffdd9bc748c04099f77a990e786cc6c125ba4b2

    • SHA512

      cedcdaebc1513b534293adc18fc82a7e42d54fca797caeab24021e6096b71880f92cbd685566650c894bbe9f5aab3e01a46ddd00fa5f14490ca9ce10b7ecb2e0

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoTNKDeS98hPUdHV7RNzfJN7pFX:ymb3NkkiQ3mdBjFo5KDe88g1fD7jX

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks