General

  • Target

    fee10b19f65b992c1795a3fedb4c5aa222db8caa98e8ee42cfd670ea3c996c9f

  • Size

    646KB

  • Sample

    241124-zht24aymft

  • MD5

    acee34ca0ac3d93b449f930c25a74d6d

  • SHA1

    a44ae48fa46bd656f49bb77df9b02fcea2a632e4

  • SHA256

    fee10b19f65b992c1795a3fedb4c5aa222db8caa98e8ee42cfd670ea3c996c9f

  • SHA512

    cda65c6b2a5636ce869956b6a1a6e9782a7fd510cda5fef9f5d45cda37f855fe994fc6d1233544948fc47cc172e5850ad224a87bcc0f44fbe6d61edd87ef8016

  • SSDEEP

    12288:/KjYFScYlnxyOTcw0YweRyTqOTrHRiIUk7h0U4hkPAmquXoS:yUF03Ae0PD7L42P6u

Malware Config

Targets

    • Target

      fee10b19f65b992c1795a3fedb4c5aa222db8caa98e8ee42cfd670ea3c996c9f

    • Size

      646KB

    • MD5

      acee34ca0ac3d93b449f930c25a74d6d

    • SHA1

      a44ae48fa46bd656f49bb77df9b02fcea2a632e4

    • SHA256

      fee10b19f65b992c1795a3fedb4c5aa222db8caa98e8ee42cfd670ea3c996c9f

    • SHA512

      cda65c6b2a5636ce869956b6a1a6e9782a7fd510cda5fef9f5d45cda37f855fe994fc6d1233544948fc47cc172e5850ad224a87bcc0f44fbe6d61edd87ef8016

    • SSDEEP

      12288:/KjYFScYlnxyOTcw0YweRyTqOTrHRiIUk7h0U4hkPAmquXoS:yUF03Ae0PD7L42P6u

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks