General

  • Target

    be5111324bcafce07aa6964bcaaf38a6ba9b36a4b1b933e4c528ca27c66f9c19

  • Size

    14KB

  • Sample

    221203-gtqvpsah94

  • MD5

    05af806443adadd7fc86b4118a630840

  • SHA1

    05f10e42d0465219e36aaccb6db73c160628759c

  • SHA256

    be5111324bcafce07aa6964bcaaf38a6ba9b36a4b1b933e4c528ca27c66f9c19

  • SHA512

    f4d37924223c897320b402988b27088c5a220fe08aab95db197cea8e1c715b79c94914ab3376a804dc7ee202ffe0ff604a5638ffc3e7a115bd2d05e118634890

  • SSDEEP

    384:p3fpa2vDcNsyySVu2zMZzv3+ODnU8RBsAVxgOsIRJXuGK:ba2wWyPU2a/ZbRBsAVqsbXu

Score
10/10

Malware Config

Targets

    • Target

      be5111324bcafce07aa6964bcaaf38a6ba9b36a4b1b933e4c528ca27c66f9c19

    • Size

      14KB

    • MD5

      05af806443adadd7fc86b4118a630840

    • SHA1

      05f10e42d0465219e36aaccb6db73c160628759c

    • SHA256

      be5111324bcafce07aa6964bcaaf38a6ba9b36a4b1b933e4c528ca27c66f9c19

    • SHA512

      f4d37924223c897320b402988b27088c5a220fe08aab95db197cea8e1c715b79c94914ab3376a804dc7ee202ffe0ff604a5638ffc3e7a115bd2d05e118634890

    • SSDEEP

      384:p3fpa2vDcNsyySVu2zMZzv3+ODnU8RBsAVxgOsIRJXuGK:ba2wWyPU2a/ZbRBsAVqsbXu

    Score
    10/10
    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v6

Tasks