General

  • Target

    6d26243ecaf91d62be76d17716bf0f359c797d466d6734c8db8330259344f668

  • Size

    680KB

  • Sample

    241124-gwtdlstlgj

  • MD5

    30b935ade4cb8d66ea1ff75fecf654ed

  • SHA1

    d6ca1f4ed17f8c6410da5d72c5f31a7d80af237c

  • SHA256

    6d26243ecaf91d62be76d17716bf0f359c797d466d6734c8db8330259344f668

  • SHA512

    cd82625b2515578a5547595994af547ea48c194dd58610f3fcfef616295d8f7428a40c57535689453dfd2b1ba8c097ca396703e4e70600ecf39ebe69844b7238

  • SSDEEP

    12288:ItN82DmM2Hgcc/PHQZmptmxDTmtgPIiC13pezW81DW3VNZKA9JcF9joS:0N82iM2HgzXwQtumkIi5W81KFNZKA9G

Malware Config

Targets

    • Target

      6d26243ecaf91d62be76d17716bf0f359c797d466d6734c8db8330259344f668

    • Size

      680KB

    • MD5

      30b935ade4cb8d66ea1ff75fecf654ed

    • SHA1

      d6ca1f4ed17f8c6410da5d72c5f31a7d80af237c

    • SHA256

      6d26243ecaf91d62be76d17716bf0f359c797d466d6734c8db8330259344f668

    • SHA512

      cd82625b2515578a5547595994af547ea48c194dd58610f3fcfef616295d8f7428a40c57535689453dfd2b1ba8c097ca396703e4e70600ecf39ebe69844b7238

    • SSDEEP

      12288:ItN82DmM2Hgcc/PHQZmptmxDTmtgPIiC13pezW81DW3VNZKA9JcF9joS:0N82iM2HgzXwQtumkIi5W81KFNZKA9G

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks