General

  • Target

    9d6ff9ddfa891c308ac4075c6408dce04149972141718d13fa0b3a632709d278

  • Size

    208KB

  • Sample

    241121-lwjlma1lcz

  • MD5

    44ae56f4be760b3dc2ee62f2f3273945

  • SHA1

    3ab3711742f867af2f9456c1944b6c0491662e7e

  • SHA256

    9d6ff9ddfa891c308ac4075c6408dce04149972141718d13fa0b3a632709d278

  • SHA512

    3c39325f658871d93e4a6f36ec390a4c0229a99b3f3eeef9a8cb068d65f2a3cf694bf2c6b21f845ef42a4afb5a673b5a2a44557ba17778ffbe3997dd0063d235

  • SSDEEP

    6144:a9sb3kFpVF661UnbRZ5dX+neuOgLqA4FFbvR9yLflUGCHOCTmffz2oS:aU87F661uvGJLyvbcf2GCHdmfL2oS

Malware Config

Targets

    • Target

      9d6ff9ddfa891c308ac4075c6408dce04149972141718d13fa0b3a632709d278

    • Size

      208KB

    • MD5

      44ae56f4be760b3dc2ee62f2f3273945

    • SHA1

      3ab3711742f867af2f9456c1944b6c0491662e7e

    • SHA256

      9d6ff9ddfa891c308ac4075c6408dce04149972141718d13fa0b3a632709d278

    • SHA512

      3c39325f658871d93e4a6f36ec390a4c0229a99b3f3eeef9a8cb068d65f2a3cf694bf2c6b21f845ef42a4afb5a673b5a2a44557ba17778ffbe3997dd0063d235

    • SSDEEP

      6144:a9sb3kFpVF661UnbRZ5dX+neuOgLqA4FFbvR9yLflUGCHOCTmffz2oS:aU87F661uvGJLyvbcf2GCHdmfL2oS

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks