General

  • Target

    SJZ.exe

  • Size

    2.2MB

  • Sample

    241125-h5hh5svphs

  • MD5

    2a47879d5d7c982e24968bdc7bd95129

  • SHA1

    9bd80f43f3c3874574b2304fb28a1b9b419de115

  • SHA256

    17d2cc3c376542385fe208dae85a0beaa1a0e95b7e1c56b5f13d3306abef40ab

  • SHA512

    e260a563db77e1ad710bc734b89a1b3fd425e2a18cc0175354ea734286507c5ff69838fdaac25ca19c0166dfa408f38044ff34f82e4ad63e9ce32b053e41cd6b

  • SSDEEP

    49152:o3yu1rqPRI6GdE06tXJAE2fX42PhBbKlcaH:o/1qZF8VaH

Malware Config

Targets

    • Target

      SJZ.exe

    • Size

      2.2MB

    • MD5

      2a47879d5d7c982e24968bdc7bd95129

    • SHA1

      9bd80f43f3c3874574b2304fb28a1b9b419de115

    • SHA256

      17d2cc3c376542385fe208dae85a0beaa1a0e95b7e1c56b5f13d3306abef40ab

    • SHA512

      e260a563db77e1ad710bc734b89a1b3fd425e2a18cc0175354ea734286507c5ff69838fdaac25ca19c0166dfa408f38044ff34f82e4ad63e9ce32b053e41cd6b

    • SSDEEP

      49152:o3yu1rqPRI6GdE06tXJAE2fX42PhBbKlcaH:o/1qZF8VaH

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks