General

  • Target

    c2a9edcc8984fbf5318d8bdb4965fdef73653995511c565a356292f22723d6e1

  • Size

    670KB

  • Sample

    241221-1htl1azrhl

  • MD5

    525576a262837e75717b5eb7346dfb56

  • SHA1

    71ef14cf4be49b1f069a0273d6e94a3818306b3d

  • SHA256

    c2a9edcc8984fbf5318d8bdb4965fdef73653995511c565a356292f22723d6e1

  • SHA512

    36c5434fe1075ac68fd9be6e948a1aa62681df5742f4c689e0853e2a559a1d447941619c57e0c1f848c02420cf054218cd49649e82b14d1a2d20ff18d356c161

  • SSDEEP

    12288:nmHjcxed6wxFfeEibGPAuqNuWcFPohqzKvVVxz3mJZwPvkrEgyzOEx2+PDmEIvZZ:jecIFWEYmh6uxohqOb3mDMGEgcFM+7G

Malware Config

Targets

    • Target

      c2a9edcc8984fbf5318d8bdb4965fdef73653995511c565a356292f22723d6e1

    • Size

      670KB

    • MD5

      525576a262837e75717b5eb7346dfb56

    • SHA1

      71ef14cf4be49b1f069a0273d6e94a3818306b3d

    • SHA256

      c2a9edcc8984fbf5318d8bdb4965fdef73653995511c565a356292f22723d6e1

    • SHA512

      36c5434fe1075ac68fd9be6e948a1aa62681df5742f4c689e0853e2a559a1d447941619c57e0c1f848c02420cf054218cd49649e82b14d1a2d20ff18d356c161

    • SSDEEP

      12288:nmHjcxed6wxFfeEibGPAuqNuWcFPohqzKvVVxz3mJZwPvkrEgyzOEx2+PDmEIvZZ:jecIFWEYmh6uxohqOb3mDMGEgcFM+7G

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks