General

  • Target

    357ae00c66f18bf2c40308dd7e9b819f

  • Size

    80KB

  • Sample

    231225-xemshaeden

  • MD5

    357ae00c66f18bf2c40308dd7e9b819f

  • SHA1

    815f2e22db642ea2816899130593e8703e101a2c

  • SHA256

    59c5230a6509d8a801d9399ba3f4593e6ef6014a7b2e27ab1a35465bce0e8c4d

  • SHA512

    cfc99f30fbff4f9d7a1fb439660cc0233787dbeb38b8aec69f9801e0064ed28d7c64a2b9ddf643c8de90c151da07c5f2af27f0bbdd878566c0e6c6d02fdea5fd

  • SSDEEP

    768:9cxX8etsIm//39QqU8QNadrVa2wWyPU2a/ZbRBsAVqsbX6WxZ:aTm/P9xU8Bdro2wXPk/ZNBsAVqmXfxZ

Score
10/10

Malware Config

Targets

    • Target

      357ae00c66f18bf2c40308dd7e9b819f

    • Size

      80KB

    • MD5

      357ae00c66f18bf2c40308dd7e9b819f

    • SHA1

      815f2e22db642ea2816899130593e8703e101a2c

    • SHA256

      59c5230a6509d8a801d9399ba3f4593e6ef6014a7b2e27ab1a35465bce0e8c4d

    • SHA512

      cfc99f30fbff4f9d7a1fb439660cc0233787dbeb38b8aec69f9801e0064ed28d7c64a2b9ddf643c8de90c151da07c5f2af27f0bbdd878566c0e6c6d02fdea5fd

    • SSDEEP

      768:9cxX8etsIm//39QqU8QNadrVa2wWyPU2a/ZbRBsAVqsbX6WxZ:aTm/P9xU8Bdro2wXPk/ZNBsAVqmXfxZ

    Score
    10/10
    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks