blackmoon | b328fe00549e65602144d160a9256de593d6ff6a338dc3841eaadd0a7f7c16c0 | Triage

Sharing

General

Target

b328fe00549e65602144d160a9256de593d6ff6a338dc3841eaadd0a7f7c16c0
Size

9.0MB
Sample

241123-yvx4vatnbz
MD5

c08e263dfca802f63c1b3fb14fad3fc4
SHA1

2cccbe9c2a4d247127ace8663d3573d96daa846d
SHA256

b328fe00549e65602144d160a9256de593d6ff6a338dc3841eaadd0a7f7c16c0
SHA512

5b1474f0de8e3da4b3c5d1baa1be73f8e0337d9a0f92ec40f7fbb8c1e32b666ffa391768efec474db41691f8c2471b3a1fbc369edc7df0e33f4e7079949700d4
SSDEEP

196608:j1JcDKlFBqZcPzFwDxURK8vyqByLdlf3hRQIgLKN:5ODKlFBqauayOclfhRQIG2

Score

10^/10

blackmoon discovery spyware stealer

Malware Config

Targets

- Target
  
  b328fe00549e65602144d160a9256de593d6ff6a338dc3841eaadd0a7f7c16c0
- Size
  
  9.0MB
- MD5
  
  c08e263dfca802f63c1b3fb14fad3fc4
- SHA1
  
  2cccbe9c2a4d247127ace8663d3573d96daa846d
- SHA256
  
  b328fe00549e65602144d160a9256de593d6ff6a338dc3841eaadd0a7f7c16c0
- SHA512
  
  5b1474f0de8e3da4b3c5d1baa1be73f8e0337d9a0f92ec40f7fbb8c1e32b666ffa391768efec474db41691f8c2471b3a1fbc369edc7df0e33f4e7079949700d4
- SSDEEP
  
  196608:j1JcDKlFBqZcPzFwDxURK8vyqByLdlf3hRQIgLKN:5ODKlFBqauayOclfhRQIG2
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer