General

  • Target

    921894264c4837bb940f0b9fd29330ccf9db84aed4b6b4df81aa96947f2ee016

  • Size

    669KB

  • Sample

    241125-gs27caylbq

  • MD5

    6b7340de26cef575ca5d07ad7d650d92

  • SHA1

    ffb99c285e0d091166446ae252f67a0e22e78cfa

  • SHA256

    921894264c4837bb940f0b9fd29330ccf9db84aed4b6b4df81aa96947f2ee016

  • SHA512

    bb18a5b5bb24deb36398adb0667e73a0d1a7a4562c1a5bf76417c2e6327939cc836351c5e7dcf6eb1e299c22f51a53c285192db8658e34ded351c5d16db30082

  • SSDEEP

    12288:XT3pg4LKkLLgGHbyA5TZil28r7ruTP0MYBnfJkpeQEmmoS:XT3i4LK3GOCY28rHuT8znxkU

Malware Config

Targets

    • Target

      921894264c4837bb940f0b9fd29330ccf9db84aed4b6b4df81aa96947f2ee016

    • Size

      669KB

    • MD5

      6b7340de26cef575ca5d07ad7d650d92

    • SHA1

      ffb99c285e0d091166446ae252f67a0e22e78cfa

    • SHA256

      921894264c4837bb940f0b9fd29330ccf9db84aed4b6b4df81aa96947f2ee016

    • SHA512

      bb18a5b5bb24deb36398adb0667e73a0d1a7a4562c1a5bf76417c2e6327939cc836351c5e7dcf6eb1e299c22f51a53c285192db8658e34ded351c5d16db30082

    • SSDEEP

      12288:XT3pg4LKkLLgGHbyA5TZil28r7ruTP0MYBnfJkpeQEmmoS:XT3i4LK3GOCY28rHuT8znxkU

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks