blackmoon | 26c17c93d4c4b4d98874724f2d19621f57e7bfb4eec94195adaf0825672b8154 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26c17c93d4c4b4d98874724f2d19621f57e7bfb4eec94195adaf0825672b8154
Size

9.0MB
Sample

240626-apmh6asgng
MD5

7e1b37d9b6f6708829d4a84cd166f2e9
SHA1

8b23e12ff9a6f47aafd3a546b40243fc35a79361
SHA256

26c17c93d4c4b4d98874724f2d19621f57e7bfb4eec94195adaf0825672b8154
SHA512

1d4472ccba4a06881d1ee09c1aa4408ca0986916fb2193a8a8f18dd7f5b9c3190fa5e86af94e27a5e6812e84a4c65de55e4c69a22b7ac095d8c2adaeed21c2f3
SSDEEP

196608:nJJcDKlFBqZcPzFwDxURK8vyqByLdlf3hRQIgLKN:JODKlFBqauayOclfhRQIG2

Score

10^/10

blackmoon spyware stealer

Malware Config

Targets

- Target
  
  26c17c93d4c4b4d98874724f2d19621f57e7bfb4eec94195adaf0825672b8154
- Size
  
  9.0MB
- MD5
  
  7e1b37d9b6f6708829d4a84cd166f2e9
- SHA1
  
  8b23e12ff9a6f47aafd3a546b40243fc35a79361
- SHA256
  
  26c17c93d4c4b4d98874724f2d19621f57e7bfb4eec94195adaf0825672b8154
- SHA512
  
  1d4472ccba4a06881d1ee09c1aa4408ca0986916fb2193a8a8f18dd7f5b9c3190fa5e86af94e27a5e6812e84a4c65de55e4c69a22b7ac095d8c2adaeed21c2f3
- SSDEEP
  
  196608:nJJcDKlFBqZcPzFwDxURK8vyqByLdlf3hRQIgLKN:JODKlFBqauayOclfhRQIG2
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2