General

  • Target

    6f3d8d6f6b71d364d68addc20a22a3b6c6431d03f8edb062ff2b93ee6916a62f.exe

  • Size

    246KB

  • Sample

    241218-egn48ssjcz

  • MD5

    eae287a16347752d6498b8e693a50fe7

  • SHA1

    27c46b268ed09b940ced768de57ddc008c2b62d6

  • SHA256

    6f3d8d6f6b71d364d68addc20a22a3b6c6431d03f8edb062ff2b93ee6916a62f

  • SHA512

    c5eb5f97f74d6860f845fd7ef70fae4dc455668aa76346403e77e29f174e39afe85544fca50cc170e37571af9c5c6642f64e64d2f92b79e5b400ed4a86f4d1c0

  • SSDEEP

    6144:gHcjQGemEPgPCCZ+VmCjH81x4Z7Cn0oOUGrP2N+0heWgcl:scjv4BjH8D4kdurPohVV

Malware Config

Targets

    • Target

      6f3d8d6f6b71d364d68addc20a22a3b6c6431d03f8edb062ff2b93ee6916a62f.exe

    • Size

      246KB

    • MD5

      eae287a16347752d6498b8e693a50fe7

    • SHA1

      27c46b268ed09b940ced768de57ddc008c2b62d6

    • SHA256

      6f3d8d6f6b71d364d68addc20a22a3b6c6431d03f8edb062ff2b93ee6916a62f

    • SHA512

      c5eb5f97f74d6860f845fd7ef70fae4dc455668aa76346403e77e29f174e39afe85544fca50cc170e37571af9c5c6642f64e64d2f92b79e5b400ed4a86f4d1c0

    • SSDEEP

      6144:gHcjQGemEPgPCCZ+VmCjH81x4Z7Cn0oOUGrP2N+0heWgcl:scjv4BjH8D4kdurPohVV

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks