General

  • Target

    7135fa2f54b303f68dbda8225e1eda9f68b70a6dcfc765ff46b2a674ace05659

  • Size

    50KB

  • Sample

    241008-26x5rsxamk

  • MD5

    d0055aaf2813796f4836cff3779a8fd7

  • SHA1

    f118ac31aa6ebcc137f57579d4cca3535cef30d8

  • SHA256

    7135fa2f54b303f68dbda8225e1eda9f68b70a6dcfc765ff46b2a674ace05659

  • SHA512

    d3751189d8fb83831aaaa57604480031c540c1de25343d95d93dd58da5d28148f775960c3b0fbab3f62579b28c84127e61b47da97cf453fe0d7442cbaf1586d8

  • SSDEEP

    1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvXB:0cdpeeBSHHMHLf9RyIKB

Malware Config

Targets

    • Target

      7135fa2f54b303f68dbda8225e1eda9f68b70a6dcfc765ff46b2a674ace05659

    • Size

      50KB

    • MD5

      d0055aaf2813796f4836cff3779a8fd7

    • SHA1

      f118ac31aa6ebcc137f57579d4cca3535cef30d8

    • SHA256

      7135fa2f54b303f68dbda8225e1eda9f68b70a6dcfc765ff46b2a674ace05659

    • SHA512

      d3751189d8fb83831aaaa57604480031c540c1de25343d95d93dd58da5d28148f775960c3b0fbab3f62579b28c84127e61b47da97cf453fe0d7442cbaf1586d8

    • SSDEEP

      1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvXB:0cdpeeBSHHMHLf9RyIKB

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks