General

  • Target

    695df4f9eb709628fbaff8fde466997c6373d3efd15bb683bc580d8d60421f15.exe

  • Size

    49KB

  • Sample

    241122-yhyvlsxmdz

  • MD5

    3b9eedf4db998c4f18a0c7ce94a47e44

  • SHA1

    8e68b50ae5c2f8b589727f0c9135da44646f03d8

  • SHA256

    695df4f9eb709628fbaff8fde466997c6373d3efd15bb683bc580d8d60421f15

  • SHA512

    173fc95204b3924949ee001675e653b40e8cafdc3ef0f9b7e5d9e870067eb55b01c6d62ec5b73ab1740733d0ba7d07a50a066fb636246c48b16ae9808e2dbcfc

  • SSDEEP

    1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5bx7DUa:0cdpeeBSHHMHLf9Rybx7D5

Malware Config

Targets

    • Target

      695df4f9eb709628fbaff8fde466997c6373d3efd15bb683bc580d8d60421f15.exe

    • Size

      49KB

    • MD5

      3b9eedf4db998c4f18a0c7ce94a47e44

    • SHA1

      8e68b50ae5c2f8b589727f0c9135da44646f03d8

    • SHA256

      695df4f9eb709628fbaff8fde466997c6373d3efd15bb683bc580d8d60421f15

    • SHA512

      173fc95204b3924949ee001675e653b40e8cafdc3ef0f9b7e5d9e870067eb55b01c6d62ec5b73ab1740733d0ba7d07a50a066fb636246c48b16ae9808e2dbcfc

    • SSDEEP

      1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5bx7DUa:0cdpeeBSHHMHLf9Rybx7D5

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks