General

  • Target

    5b50b6d30bff6dbefcc0c7a4cf7ab64bfc6a2aa1b5f652806babc64fa459e83d

  • Size

    670KB

  • Sample

    241217-n2sslaylew

  • MD5

    9f31bbf17759d76b3fd6fa102918be41

  • SHA1

    622f7e8e985a13aaf3c48a33963cef0d027f09df

  • SHA256

    5b50b6d30bff6dbefcc0c7a4cf7ab64bfc6a2aa1b5f652806babc64fa459e83d

  • SHA512

    84e92cf9fac0a2027f630d431a4fa2238e3fe69252898d3373266c15ea9fe756b07dba7bac30cfc87de41aecbee539b6f4315d9777225516fc7f4296115a2d4f

  • SSDEEP

    12288:6mHjiLo2NZysI/DZLB7VD3Bt7f/IrHkVINKuTejDuJXucXtjEDSQHRXoS:ALoaZcZD3Bt7fckQPefuVum4DSQx

Malware Config

Targets

    • Target

      5b50b6d30bff6dbefcc0c7a4cf7ab64bfc6a2aa1b5f652806babc64fa459e83d

    • Size

      670KB

    • MD5

      9f31bbf17759d76b3fd6fa102918be41

    • SHA1

      622f7e8e985a13aaf3c48a33963cef0d027f09df

    • SHA256

      5b50b6d30bff6dbefcc0c7a4cf7ab64bfc6a2aa1b5f652806babc64fa459e83d

    • SHA512

      84e92cf9fac0a2027f630d431a4fa2238e3fe69252898d3373266c15ea9fe756b07dba7bac30cfc87de41aecbee539b6f4315d9777225516fc7f4296115a2d4f

    • SSDEEP

      12288:6mHjiLo2NZysI/DZLB7VD3Bt7f/IrHkVINKuTejDuJXucXtjEDSQHRXoS:ALoaZcZD3Bt7fckQPefuVum4DSQx

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks