General

  • Target

    71bd1df7edfcd6b85dbf367ebe92ad41515d7dc40108392fb33c20b4d524776d

  • Size

    685KB

  • Sample

    241217-wezlmatlbz

  • MD5

    0be6ee861413fde4d9bb359c99a64a5a

  • SHA1

    6d99b15a78b03fc66a3e1cc8babeff9adcfe0358

  • SHA256

    71bd1df7edfcd6b85dbf367ebe92ad41515d7dc40108392fb33c20b4d524776d

  • SHA512

    791f13939c95568b04b1372d630c29e601ad32684f8dda3396cd8846fdecb46bf3d6cca0c4aa6a6b8345713ca71bcadbe32dfa86a682cfef61be7cbdbdfb60fc

  • SSDEEP

    12288:f5AavEnQSnGGPsVPYQmoB6f2PBefE4C1f7SZgXuMoAugwTwhFSv15LMs8EcbBoS:f5jt6GGPsVPYFk60VV1XAAmTwbM16E

Malware Config

Targets

    • Target

      71bd1df7edfcd6b85dbf367ebe92ad41515d7dc40108392fb33c20b4d524776d

    • Size

      685KB

    • MD5

      0be6ee861413fde4d9bb359c99a64a5a

    • SHA1

      6d99b15a78b03fc66a3e1cc8babeff9adcfe0358

    • SHA256

      71bd1df7edfcd6b85dbf367ebe92ad41515d7dc40108392fb33c20b4d524776d

    • SHA512

      791f13939c95568b04b1372d630c29e601ad32684f8dda3396cd8846fdecb46bf3d6cca0c4aa6a6b8345713ca71bcadbe32dfa86a682cfef61be7cbdbdfb60fc

    • SSDEEP

      12288:f5AavEnQSnGGPsVPYQmoB6f2PBefE4C1f7SZgXuMoAugwTwhFSv15LMs8EcbBoS:f5jt6GGPsVPYFk60VV1XAAmTwbM16E

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks