General

  • Target

    44014de09fab760cff57a5dd6b0484302c3a78285f75119b4fc19e6b511df57e

  • Size

    78KB

  • Sample

    240704-zzapsa1fmh

  • MD5

    86d85486037092d6bf65990084a2a1a7

  • SHA1

    e8e4c8e4df506ae563295436a235a93053ded363

  • SHA256

    44014de09fab760cff57a5dd6b0484302c3a78285f75119b4fc19e6b511df57e

  • SHA512

    c5c99421994a47cff9ee19307f3c9ab1f6df261d8a88f4651512840d618368cb23850ba3a60eb11524d392b95ccfbb79da2d09e04b5c50a164f85100039c1e20

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5ZzVIZ:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCZIZ

Malware Config

Targets

    • Target

      44014de09fab760cff57a5dd6b0484302c3a78285f75119b4fc19e6b511df57e

    • Size

      78KB

    • MD5

      86d85486037092d6bf65990084a2a1a7

    • SHA1

      e8e4c8e4df506ae563295436a235a93053ded363

    • SHA256

      44014de09fab760cff57a5dd6b0484302c3a78285f75119b4fc19e6b511df57e

    • SHA512

      c5c99421994a47cff9ee19307f3c9ab1f6df261d8a88f4651512840d618368cb23850ba3a60eb11524d392b95ccfbb79da2d09e04b5c50a164f85100039c1e20

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIsIpWCz+FR4RzWqC5ZzVIZ:ymb3NkkiQ3mdBjFIsIpZ+R4RzWqCZIZ

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks