General

  • Target

    S.exe

  • Size

    2.2MB

  • Sample

    241121-lheqhsvqbq

  • MD5

    18ecd5e87e82b2fef0f859a1961b87f8

  • SHA1

    f8e3d3e5cd738a9a813f6ba14a9de621b120ecbb

  • SHA256

    1ae10a49db468f34d17c799404749596b32cb402b33dd174b90f60b8db7dee04

  • SHA512

    ea3aa047bf31987f593302d85b923f3ed1bc5c4a73c021211c76dfa995474878b3dcb445c51048f7027620477550d387d62c9d6b4d7321fef84b01e9ff3f0963

  • SSDEEP

    49152:II0nMnyvLUpIrwXxNWOhN3hE6qVlJsNsolFM85UNm2nZecLdhl:HOMnyvmIrwhIOhFhEZVlJsiolFMoU1ZD

Malware Config

Targets

    • Target

      S.exe

    • Size

      2.2MB

    • MD5

      18ecd5e87e82b2fef0f859a1961b87f8

    • SHA1

      f8e3d3e5cd738a9a813f6ba14a9de621b120ecbb

    • SHA256

      1ae10a49db468f34d17c799404749596b32cb402b33dd174b90f60b8db7dee04

    • SHA512

      ea3aa047bf31987f593302d85b923f3ed1bc5c4a73c021211c76dfa995474878b3dcb445c51048f7027620477550d387d62c9d6b4d7321fef84b01e9ff3f0963

    • SSDEEP

      49152:II0nMnyvLUpIrwXxNWOhN3hE6qVlJsNsolFM85UNm2nZecLdhl:HOMnyvmIrwhIOhFhEZVlJsiolFMoU1ZD

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks