General

  • Target

    dfb1e004983bab035bab395ff8dfe7e6b07384f8b6352e045a73b2908ceedec3

  • Size

    714KB

  • Sample

    241219-l8bfsazrdn

  • MD5

    22940722eb3c599faef6a56678f4c2cc

  • SHA1

    c875f3123059e03e1f5fc5bb5b43d99c77537799

  • SHA256

    dfb1e004983bab035bab395ff8dfe7e6b07384f8b6352e045a73b2908ceedec3

  • SHA512

    7c9edf94558a83a40250c155f5e5344fdb15ac262cbf5fd71b0fdc1b14a37433838a6b3a2fd46b6a0bcb2a73047d86ff77e22db80188be18ac008e689c09daf0

  • SSDEEP

    12288:5A/xi4vcaskTmuilYMen9XTdhQatYVFkjsrWXOFzd4iJPq28PJpj2IOoS:i/xfkqaflveTVtUkwrPthq2b

Malware Config

Targets

    • Target

      dfb1e004983bab035bab395ff8dfe7e6b07384f8b6352e045a73b2908ceedec3

    • Size

      714KB

    • MD5

      22940722eb3c599faef6a56678f4c2cc

    • SHA1

      c875f3123059e03e1f5fc5bb5b43d99c77537799

    • SHA256

      dfb1e004983bab035bab395ff8dfe7e6b07384f8b6352e045a73b2908ceedec3

    • SHA512

      7c9edf94558a83a40250c155f5e5344fdb15ac262cbf5fd71b0fdc1b14a37433838a6b3a2fd46b6a0bcb2a73047d86ff77e22db80188be18ac008e689c09daf0

    • SSDEEP

      12288:5A/xi4vcaskTmuilYMen9XTdhQatYVFkjsrWXOFzd4iJPq28PJpj2IOoS:i/xfkqaflveTVtUkwrPthq2b

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks