General

  • Target

    e8bcab6267c3af6e8fd7618813ec6e4d688589d2735c80dd4467ec9d1fe93749

  • Size

    669KB

  • Sample

    241122-gsgkmsvqf1

  • MD5

    e338d36fb0b9ef82512993efff4add2d

  • SHA1

    132dd272b7da9153db6595e7c97aa132e5f178f9

  • SHA256

    e8bcab6267c3af6e8fd7618813ec6e4d688589d2735c80dd4467ec9d1fe93749

  • SHA512

    3d2b6aad8fbef911414564f0d55294fe0c4660285b82865c68a6e99e5f776e52cf158cf83f107697e321e3ff75f70bfce426f25374482027255b641e0791269c

  • SSDEEP

    12288:CS/XhgV19bvEhQRLL5JH0iBTtsrBhl1DD8dqtrHKQU2eMYogQuYb48lYBjY9ra54:LfCvoQR/XH0insrzPcd8qH2lZiK48lO0

Malware Config

Targets

    • Target

      e8bcab6267c3af6e8fd7618813ec6e4d688589d2735c80dd4467ec9d1fe93749

    • Size

      669KB

    • MD5

      e338d36fb0b9ef82512993efff4add2d

    • SHA1

      132dd272b7da9153db6595e7c97aa132e5f178f9

    • SHA256

      e8bcab6267c3af6e8fd7618813ec6e4d688589d2735c80dd4467ec9d1fe93749

    • SHA512

      3d2b6aad8fbef911414564f0d55294fe0c4660285b82865c68a6e99e5f776e52cf158cf83f107697e321e3ff75f70bfce426f25374482027255b641e0791269c

    • SSDEEP

      12288:CS/XhgV19bvEhQRLL5JH0iBTtsrBhl1DD8dqtrHKQU2eMYogQuYb48lYBjY9ra54:LfCvoQR/XH0insrzPcd8qH2lZiK48lO0

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks