General

  • Target

    9a3be43c67a761eef2460d1cf3a66d2467be931d2dcb3d5af37a00c86d15478d

  • Size

    669KB

  • Sample

    241121-nezmmawmcl

  • MD5

    a26138a0726de2fc0eda14eaaaebeaba

  • SHA1

    2771aaea49b67cadbbaf73739a05895d169fa383

  • SHA256

    9a3be43c67a761eef2460d1cf3a66d2467be931d2dcb3d5af37a00c86d15478d

  • SHA512

    3c7f4ac398294c860d0695f7e3c1792f8e781126e89b132dff9b312f284554789083574f1ae79e455bca8d97d60df4a9fb42dbc3c7666b60e135ad59c243a0cd

  • SSDEEP

    12288:GnE+9r9Ppb12aBFBZtt3Z5PoxZimwr4f9IpdOUVxfDthqQkY5ygrI3gVAiujoS:GnEG3vB95yJgqBKbtEQBJI3gVAi

Malware Config

Targets

    • Target

      9a3be43c67a761eef2460d1cf3a66d2467be931d2dcb3d5af37a00c86d15478d

    • Size

      669KB

    • MD5

      a26138a0726de2fc0eda14eaaaebeaba

    • SHA1

      2771aaea49b67cadbbaf73739a05895d169fa383

    • SHA256

      9a3be43c67a761eef2460d1cf3a66d2467be931d2dcb3d5af37a00c86d15478d

    • SHA512

      3c7f4ac398294c860d0695f7e3c1792f8e781126e89b132dff9b312f284554789083574f1ae79e455bca8d97d60df4a9fb42dbc3c7666b60e135ad59c243a0cd

    • SSDEEP

      12288:GnE+9r9Ppb12aBFBZtt3Z5PoxZimwr4f9IpdOUVxfDthqQkY5ygrI3gVAiujoS:GnEG3vB95yJgqBKbtEQBJI3gVAi

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks