blackmoon | dc6c35226bca91f7e9e0c0ae81456812b4ed5262dcc14e5c7168ed335876c8fe | Triage

Sharing

General

Target

dc6c35226bca91f7e9e0c0ae81456812b4ed5262dcc14e5c7168ed335876c8fe
Size

9.0MB
Sample

240524-n51mlsha8z
MD5

f731aa171797d3a103ecc187106c857c
SHA1

8e1f601490d102a6683734b29ec0276bc44c3f35
SHA256

dc6c35226bca91f7e9e0c0ae81456812b4ed5262dcc14e5c7168ed335876c8fe
SHA512

2c12a6402b6bb539554b5ca83ec4cf26a3b1a39bec7bd92905e0e464e0d52aada27ff3c7f1c3a4078f040d0e80b2348a81ed331983b366a26fecc42638f188dc
SSDEEP

196608:n0JcDKlFBqZcPzFwDxURK8vyqByLdlf3hRQIgLKN:0ODKlFBqauayOclfhRQIG2

Score

10^/10

blackmoon spyware stealer

Malware Config

Targets

- Target
  
  dc6c35226bca91f7e9e0c0ae81456812b4ed5262dcc14e5c7168ed335876c8fe
- Size
  
  9.0MB
- MD5
  
  f731aa171797d3a103ecc187106c857c
- SHA1
  
  8e1f601490d102a6683734b29ec0276bc44c3f35
- SHA256
  
  dc6c35226bca91f7e9e0c0ae81456812b4ed5262dcc14e5c7168ed335876c8fe
- SHA512
  
  2c12a6402b6bb539554b5ca83ec4cf26a3b1a39bec7bd92905e0e464e0d52aada27ff3c7f1c3a4078f040d0e80b2348a81ed331983b366a26fecc42638f188dc
- SSDEEP
  
  196608:n0JcDKlFBqZcPzFwDxURK8vyqByLdlf3hRQIgLKN:0ODKlFBqauayOclfhRQIG2
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2