General

  • Target

    73fb34e2780202a04e897ba7a581e2db5423643b71c8d440eb92daa298b1cd49.exe

  • Size

    53KB

  • Sample

    241217-qyfpza1pdp

  • MD5

    f137b6ff5ad0a3b66840201784875e9c

  • SHA1

    5c17e8afcc7e0667646cb2d354bc725ced7db6a7

  • SHA256

    73fb34e2780202a04e897ba7a581e2db5423643b71c8d440eb92daa298b1cd49

  • SHA512

    58d9ec00b033f24bf2245907e3328c94f4f46c12ec6533dbdb2373f081ae811a85de079722833123239896b24fc51499351c3eecfd2ef0ce6562f113919479f4

  • SSDEEP

    1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvl5:0cdpeeBSHHMHLf9RyIa

Malware Config

Targets

    • Target

      73fb34e2780202a04e897ba7a581e2db5423643b71c8d440eb92daa298b1cd49.exe

    • Size

      53KB

    • MD5

      f137b6ff5ad0a3b66840201784875e9c

    • SHA1

      5c17e8afcc7e0667646cb2d354bc725ced7db6a7

    • SHA256

      73fb34e2780202a04e897ba7a581e2db5423643b71c8d440eb92daa298b1cd49

    • SHA512

      58d9ec00b033f24bf2245907e3328c94f4f46c12ec6533dbdb2373f081ae811a85de079722833123239896b24fc51499351c3eecfd2ef0ce6562f113919479f4

    • SSDEEP

      1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvl5:0cdpeeBSHHMHLf9RyIa

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks