General

  • Target

    026b8cd278d135190900cd4029cf3b83160ddcdbea43eae96fe47e2c2763e252

  • Size

    61KB

  • Sample

    240704-wvq97asaml

  • MD5

    7541718618fef20352f6a10cad59ade1

  • SHA1

    8eac70a2b163b2a30727287766e0faae7b7f5a87

  • SHA256

    026b8cd278d135190900cd4029cf3b83160ddcdbea43eae96fe47e2c2763e252

  • SHA512

    73b4d2c5c650c63f440eb4045412032dc550486b2c498e5d3789663379b7e12a1d9a661fa0898a53dfd59383f08cae47b33882c9b5d9a0f9801470517b8e8bb6

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIms9z:ymb3NkkiQ3mdBjFIsIFx

Malware Config

Targets

    • Target

      026b8cd278d135190900cd4029cf3b83160ddcdbea43eae96fe47e2c2763e252

    • Size

      61KB

    • MD5

      7541718618fef20352f6a10cad59ade1

    • SHA1

      8eac70a2b163b2a30727287766e0faae7b7f5a87

    • SHA256

      026b8cd278d135190900cd4029cf3b83160ddcdbea43eae96fe47e2c2763e252

    • SHA512

      73b4d2c5c650c63f440eb4045412032dc550486b2c498e5d3789663379b7e12a1d9a661fa0898a53dfd59383f08cae47b33882c9b5d9a0f9801470517b8e8bb6

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIms9z:ymb3NkkiQ3mdBjFIsIFx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks