General

  • Target

    F2.exe

  • Size

    703KB

  • Sample

    241121-lghe1s1frl

  • MD5

    b8650755ad9fccfd8bb689f5461fc782

  • SHA1

    f7d36c280edf9c8114a06ad8171118bba96df207

  • SHA256

    78733eaf03e5c92ac2dfb0ad80ee8cc1981b94a68ceda1f5e8aaceca640b7ee4

  • SHA512

    cff24f06bcffeb18bf064a4cbd345b620cc6f8eefbbabd269c0c84d53bc649f08d65d0f062f2b7ea8ec9b60a495dd23496a9a4744eeb695ac4ec3dc728514e88

  • SSDEEP

    12288:F/I7bYJkFv97jI6PMIR4A8D0A5nUrhjl3g2R/7kkL9l4OM0hB4qwLxAlnTJjWo+y:+bYO7X41TnUrfQYzkkzM0/4qwelnVW

Malware Config

Targets

    • Target

      F2.exe

    • Size

      703KB

    • MD5

      b8650755ad9fccfd8bb689f5461fc782

    • SHA1

      f7d36c280edf9c8114a06ad8171118bba96df207

    • SHA256

      78733eaf03e5c92ac2dfb0ad80ee8cc1981b94a68ceda1f5e8aaceca640b7ee4

    • SHA512

      cff24f06bcffeb18bf064a4cbd345b620cc6f8eefbbabd269c0c84d53bc649f08d65d0f062f2b7ea8ec9b60a495dd23496a9a4744eeb695ac4ec3dc728514e88

    • SSDEEP

      12288:F/I7bYJkFv97jI6PMIR4A8D0A5nUrhjl3g2R/7kkL9l4OM0hB4qwLxAlnTJjWo+y:+bYO7X41TnUrfQYzkkzM0/4qwelnVW

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks