General

  • Target

    1a73de4e208ffdb5ab53e09e7e3c5b46323ee0fcf7b630a08fe481fd5027a4ac

  • Size

    2.2MB

  • Sample

    241122-g1qhhs1qbn

  • MD5

    afbd9f8159ee78806835f405acdb7e4a

  • SHA1

    6d0456f0f3ea2f4e286fc7106ef4368c8d21e9e5

  • SHA256

    1a73de4e208ffdb5ab53e09e7e3c5b46323ee0fcf7b630a08fe481fd5027a4ac

  • SHA512

    18a6ca2e7b3975b3281116345743bce5cf8466d002f0f3bd87c709b55eb03c5dfc1eb051af6f7db3a1c948d10b2d62399a0682431007ade5d60d8c3f82ce8fd4

  • SSDEEP

    49152:FosNE3HjaJ9kaseHV4uc/yrdgSbvtN0pCOofg05dWkMa9i8R4xBips:FQ3o98eHGu2y5JbvtQofg2dLMa9i04xj

Malware Config

Targets

    • Target

      1a73de4e208ffdb5ab53e09e7e3c5b46323ee0fcf7b630a08fe481fd5027a4ac

    • Size

      2.2MB

    • MD5

      afbd9f8159ee78806835f405acdb7e4a

    • SHA1

      6d0456f0f3ea2f4e286fc7106ef4368c8d21e9e5

    • SHA256

      1a73de4e208ffdb5ab53e09e7e3c5b46323ee0fcf7b630a08fe481fd5027a4ac

    • SHA512

      18a6ca2e7b3975b3281116345743bce5cf8466d002f0f3bd87c709b55eb03c5dfc1eb051af6f7db3a1c948d10b2d62399a0682431007ade5d60d8c3f82ce8fd4

    • SSDEEP

      49152:FosNE3HjaJ9kaseHV4uc/yrdgSbvtN0pCOofg05dWkMa9i8R4xBips:FQ3o98eHGu2y5JbvtQofg2dLMa9i04xj

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks