blackmoon | d42ab4f3b55213d18e29a17e6a34c9b4beee1dbeae92fe5f8051276e68743792 | Triage

Sharing

General

Target

d42ab4f3b55213d18e29a17e6a34c9b4beee1dbeae92fe5f8051276e68743792
Size

124KB
Sample

230314-wf2sdaag8w
MD5

e09fac9877914b5e4b6e1fb0be54a668
SHA1

0eb6f198d25efb6f89d0c659044dec5bfe6085f4
SHA256

d42ab4f3b55213d18e29a17e6a34c9b4beee1dbeae92fe5f8051276e68743792
SHA512

b92f0f88187824324d5e48066a873b685f67506eadd6bbb4d07b9e8120206d7df88ee63fd50463171ceba80fc7ab7985e99973c0bc4b13a3deed6bf9febb9341
SSDEEP

3072:lcvW8TWNkbjAmcVKwH3AX4Ymbm4fjtYqTvT:lcvtTWCwHcEFaqT7

Score

10^/10

blackmoon

Malware Config

Targets

- Target
  
  d42ab4f3b55213d18e29a17e6a34c9b4beee1dbeae92fe5f8051276e68743792
- Size
  
  124KB
- MD5
  
  e09fac9877914b5e4b6e1fb0be54a668
- SHA1
  
  0eb6f198d25efb6f89d0c659044dec5bfe6085f4
- SHA256
  
  d42ab4f3b55213d18e29a17e6a34c9b4beee1dbeae92fe5f8051276e68743792
- SHA512
  
  b92f0f88187824324d5e48066a873b685f67506eadd6bbb4d07b9e8120206d7df88ee63fd50463171ceba80fc7ab7985e99973c0bc4b13a3deed6bf9febb9341
- SSDEEP
  
  3072:lcvW8TWNkbjAmcVKwH3AX4Ymbm4fjtYqTvT:lcvtTWCwHcEFaqT7
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2