General

  • Target

    6e295cce4e6e476cb0a8977baa078e6388c473c1aea11246055f6bbf8964ffbc

  • Size

    719KB

  • Sample

    241220-grk7fa1ngy

  • MD5

    d536b42a0357f934f3c1b1ba402b27cc

  • SHA1

    87c66d69f7b85f150bd77a0193c3efbaad35fc8c

  • SHA256

    6e295cce4e6e476cb0a8977baa078e6388c473c1aea11246055f6bbf8964ffbc

  • SHA512

    e2ca19f43e3fccfdc01b3b733e7a6d90a08c27cad826aea17b0d8b6337635af4d981a0c74bff0697930449497068e77edf08fdde8820a3a812571840bc64e1f7

  • SSDEEP

    12288:lrm86rSUcX9+OwJ05yoQxZMx6Qc93sn+cC7FXGd6XW19c3y++kaOkKalIZ2eoS:l68GclEQydxG6Q+3o9CRWdN19LuaO2+

Malware Config

Targets

    • Target

      6e295cce4e6e476cb0a8977baa078e6388c473c1aea11246055f6bbf8964ffbc

    • Size

      719KB

    • MD5

      d536b42a0357f934f3c1b1ba402b27cc

    • SHA1

      87c66d69f7b85f150bd77a0193c3efbaad35fc8c

    • SHA256

      6e295cce4e6e476cb0a8977baa078e6388c473c1aea11246055f6bbf8964ffbc

    • SHA512

      e2ca19f43e3fccfdc01b3b733e7a6d90a08c27cad826aea17b0d8b6337635af4d981a0c74bff0697930449497068e77edf08fdde8820a3a812571840bc64e1f7

    • SSDEEP

      12288:lrm86rSUcX9+OwJ05yoQxZMx6Qc93sn+cC7FXGd6XW19c3y++kaOkKalIZ2eoS:l68GclEQydxG6Q+3o9CRWdN19LuaO2+

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks