General

  • Target

    S1.exe

  • Size

    2.2MB

  • Sample

    241125-jaaqgsvrfs

  • MD5

    4803780a52e82fdb1eff7cfa2469fadb

  • SHA1

    0b917c790c508a7e7d7ea74a1204be9503838dc9

  • SHA256

    5691193b351b122a3271377a892c82f88a210bdcf0b5e143079d65b2db78a53d

  • SHA512

    59a4982a7dbb6787b62289a54b30f22bc97d6369dcd3748c21a799f9a9758a75095e91637771745eec981af9e75ebe711545aac9f0f96c46611f27cecf17ae92

  • SSDEEP

    49152:e11n7ehjcCfVIsTHq5orq6aDal9UWBEmOaL7HkifbgABU02kAv2dkk4z6gLUvS15:S1ihfIsZdaDUGMyKkygABlRw2H49AvSy

Malware Config

Targets

    • Target

      S1.exe

    • Size

      2.2MB

    • MD5

      4803780a52e82fdb1eff7cfa2469fadb

    • SHA1

      0b917c790c508a7e7d7ea74a1204be9503838dc9

    • SHA256

      5691193b351b122a3271377a892c82f88a210bdcf0b5e143079d65b2db78a53d

    • SHA512

      59a4982a7dbb6787b62289a54b30f22bc97d6369dcd3748c21a799f9a9758a75095e91637771745eec981af9e75ebe711545aac9f0f96c46611f27cecf17ae92

    • SSDEEP

      49152:e11n7ehjcCfVIsTHq5orq6aDal9UWBEmOaL7HkifbgABU02kAv2dkk4z6gLUvS15:S1ihfIsZdaDUGMyKkygABlRw2H49AvSy

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks