General

  • Target

    5274b4b6c3c643516da9e477d9a6c723fe93d23a944271a20fd41c8e6f41f1e1.exe

  • Size

    4.5MB

  • Sample

    241217-12zblazlg1

  • MD5

    00fb7f258e59980604544b65be12a5bb

  • SHA1

    72c91b905acca2cc35b1ddc03c731ab9710f0292

  • SHA256

    5274b4b6c3c643516da9e477d9a6c723fe93d23a944271a20fd41c8e6f41f1e1

  • SHA512

    69764a8533ac91aa8277dd33be5dd4afebd91699673c43b1705d20aca2abd831fd2f2ba84eaa7c703be5d33c1103003c985b0ab4a028a70934c6ab90e07e5980

  • SSDEEP

    49152:bNIlBFEedDqnroHO8wOZHOlZZJoYboS/BSMojkkhApOa:bNI3cnsHtvZH06YbtBhXKW

Malware Config

Targets

    • Target

      5274b4b6c3c643516da9e477d9a6c723fe93d23a944271a20fd41c8e6f41f1e1.exe

    • Size

      4.5MB

    • MD5

      00fb7f258e59980604544b65be12a5bb

    • SHA1

      72c91b905acca2cc35b1ddc03c731ab9710f0292

    • SHA256

      5274b4b6c3c643516da9e477d9a6c723fe93d23a944271a20fd41c8e6f41f1e1

    • SHA512

      69764a8533ac91aa8277dd33be5dd4afebd91699673c43b1705d20aca2abd831fd2f2ba84eaa7c703be5d33c1103003c985b0ab4a028a70934c6ab90e07e5980

    • SSDEEP

      49152:bNIlBFEedDqnroHO8wOZHOlZZJoYboS/BSMojkkhApOa:bNI3cnsHtvZH06YbtBhXKW

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks