General

  • Target

    ef82f37bd19aa33843c0fba9cf6661961e8eb271fe8e6c503a32bb5aacaa0b31.exe

  • Size

    2.2MB

  • Sample

    241122-dsyx5szjhn

  • MD5

    863b6101c87ee79deae663fbf29ca9d8

  • SHA1

    97b1118f25c65250558bb5a56096b68cb47f05e7

  • SHA256

    ef82f37bd19aa33843c0fba9cf6661961e8eb271fe8e6c503a32bb5aacaa0b31

  • SHA512

    8d17eccd4be7b68bf9667bd482ce4e5a29cf3210ad0056c9e40f0800d2c83ddcf6690e178d17d991ffb9ef9e4b79d75abeedf40ffff0ddbd5730e76aef7a76f0

  • SSDEEP

    49152:V4X55hPwULkM4/XEuGP0vbutak05JJhpjLefDxMROcXcl:V4XRPrv4/9tb5JJhNKL5c

Malware Config

Targets

    • Target

      ef82f37bd19aa33843c0fba9cf6661961e8eb271fe8e6c503a32bb5aacaa0b31.exe

    • Size

      2.2MB

    • MD5

      863b6101c87ee79deae663fbf29ca9d8

    • SHA1

      97b1118f25c65250558bb5a56096b68cb47f05e7

    • SHA256

      ef82f37bd19aa33843c0fba9cf6661961e8eb271fe8e6c503a32bb5aacaa0b31

    • SHA512

      8d17eccd4be7b68bf9667bd482ce4e5a29cf3210ad0056c9e40f0800d2c83ddcf6690e178d17d991ffb9ef9e4b79d75abeedf40ffff0ddbd5730e76aef7a76f0

    • SSDEEP

      49152:V4X55hPwULkM4/XEuGP0vbutak05JJhpjLefDxMROcXcl:V4XRPrv4/9tb5JJhNKL5c

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks