General

  • Target

    8d414bcb7feeebe6fe26fd14d43b4e5cb4a237cd76d84065994e917ae8384029.exe

  • Size

    59KB

  • Sample

    241217-nkpdvaxret

  • MD5

    fe1e8f308114ebb1bccafa6b348169a3

  • SHA1

    035898a02cd00797340815d2e7f45351d5e8b376

  • SHA256

    8d414bcb7feeebe6fe26fd14d43b4e5cb4a237cd76d84065994e917ae8384029

  • SHA512

    f3375cb04f32553350afaf8e714637bec1026ad0a5f66fb522580a48ed2908071d1f6eec7f0491489178d2dd8e35762cf2e4c8d4b3f48abf176e32d20dcf63bd

  • SSDEEP

    1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5bx7DUQeDac7Akm:0cdpeeBSHHMHLf9Rybx7DYec7Fm

Malware Config

Targets

    • Target

      8d414bcb7feeebe6fe26fd14d43b4e5cb4a237cd76d84065994e917ae8384029.exe

    • Size

      59KB

    • MD5

      fe1e8f308114ebb1bccafa6b348169a3

    • SHA1

      035898a02cd00797340815d2e7f45351d5e8b376

    • SHA256

      8d414bcb7feeebe6fe26fd14d43b4e5cb4a237cd76d84065994e917ae8384029

    • SHA512

      f3375cb04f32553350afaf8e714637bec1026ad0a5f66fb522580a48ed2908071d1f6eec7f0491489178d2dd8e35762cf2e4c8d4b3f48abf176e32d20dcf63bd

    • SSDEEP

      1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5bx7DUQeDac7Akm:0cdpeeBSHHMHLf9Rybx7DYec7Fm

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks