General
-
Target
d0420fb19d6ceba61ff493731078fb89e627868c68eba7c13dec56f07b05da7b
-
Size
13.2MB
-
Sample
240521-sr14faad4s
-
MD5
3311045f443c5ba6ec03f85d70a62259
-
SHA1
afd1b2b7cef265c9172882078d26acba903c0878
-
SHA256
d0420fb19d6ceba61ff493731078fb89e627868c68eba7c13dec56f07b05da7b
-
SHA512
8464b653a437d158fe61998638fedd55bc8e2d6b150bc58608a65de41fc05fc5e7b2e3e9eaf5e75b99385ff1dc9c49f404493e2140bfc88b9f098608a4597285
-
SSDEEP
393216:x555f+/rbh3NjqWYafk9vK58X1fxkLkr0B64:95SrtRZS9vK56xEkU64
Behavioral task
behavioral1
Sample
d0420fb19d6ceba61ff493731078fb89e627868c68eba7c13dec56f07b05da7b.exe
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
d0420fb19d6ceba61ff493731078fb89e627868c68eba7c13dec56f07b05da7b
-
Size
13.2MB
-
MD5
3311045f443c5ba6ec03f85d70a62259
-
SHA1
afd1b2b7cef265c9172882078d26acba903c0878
-
SHA256
d0420fb19d6ceba61ff493731078fb89e627868c68eba7c13dec56f07b05da7b
-
SHA512
8464b653a437d158fe61998638fedd55bc8e2d6b150bc58608a65de41fc05fc5e7b2e3e9eaf5e75b99385ff1dc9c49f404493e2140bfc88b9f098608a4597285
-
SSDEEP
393216:x555f+/rbh3NjqWYafk9vK58X1fxkLkr0B64:95SrtRZS9vK56xEkU64
-
Detect Blackmoon payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-