General

  • Target

    1b18b9097a8d210b37799de2d606661f6a5a69cdde6499516c6e906c4acebd8aN.exe

  • Size

    58KB

  • Sample

    241217-c2fmgsynbn

  • MD5

    8259e1990b5735aa700e58f172f51b90

  • SHA1

    4371e9dd146b265bf61f1a35ff579eaccb67eb78

  • SHA256

    1b18b9097a8d210b37799de2d606661f6a5a69cdde6499516c6e906c4acebd8a

  • SHA512

    19a54b6c9ecc661a2d57c9d433bad27aa6a6a139b1c321ae941e89d4750d349f23df2a137b5c339577788f11455034fb6f7202bd2ce64e72f685fcf9c871a385

  • SSDEEP

    1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5bx7DUQeDac7AkW:0cdpeeBSHHMHLf9Rybx7DYec7FW

Malware Config

Targets

    • Target

      1b18b9097a8d210b37799de2d606661f6a5a69cdde6499516c6e906c4acebd8aN.exe

    • Size

      58KB

    • MD5

      8259e1990b5735aa700e58f172f51b90

    • SHA1

      4371e9dd146b265bf61f1a35ff579eaccb67eb78

    • SHA256

      1b18b9097a8d210b37799de2d606661f6a5a69cdde6499516c6e906c4acebd8a

    • SHA512

      19a54b6c9ecc661a2d57c9d433bad27aa6a6a139b1c321ae941e89d4750d349f23df2a137b5c339577788f11455034fb6f7202bd2ce64e72f685fcf9c871a385

    • SSDEEP

      1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5bx7DUQeDac7AkW:0cdpeeBSHHMHLf9Rybx7DYec7FW

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks