General

  • Target

    f1386cfbfaec37b76233324d09a5413120b930a5d36379291d1240aec4fbf1b1N.exe

  • Size

    54KB

  • Sample

    241219-zdcbgszjhn

  • MD5

    d8490520b24f1e96ae3ca8df5ef552c0

  • SHA1

    99acdb5d70ecdf283a8231459165e3a0c11f35b9

  • SHA256

    f1386cfbfaec37b76233324d09a5413120b930a5d36379291d1240aec4fbf1b1

  • SHA512

    78d77f43d6079744c89dc1388eabf74d415f432e32827bc96d58ec231982d99c75dd1f44c607f3a70cf89dd9e13564693ae0ec2eb143a48d88309b07e806cf9b

  • SSDEEP

    1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvlNJL:0cdpeeBSHHMHLf9RyIE1

Malware Config

Targets

    • Target

      f1386cfbfaec37b76233324d09a5413120b930a5d36379291d1240aec4fbf1b1N.exe

    • Size

      54KB

    • MD5

      d8490520b24f1e96ae3ca8df5ef552c0

    • SHA1

      99acdb5d70ecdf283a8231459165e3a0c11f35b9

    • SHA256

      f1386cfbfaec37b76233324d09a5413120b930a5d36379291d1240aec4fbf1b1

    • SHA512

      78d77f43d6079744c89dc1388eabf74d415f432e32827bc96d58ec231982d99c75dd1f44c607f3a70cf89dd9e13564693ae0ec2eb143a48d88309b07e806cf9b

    • SSDEEP

      1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvlNJL:0cdpeeBSHHMHLf9RyIE1

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks