General

  • Target

    d9eb5cb200d5787f9d3a7a691c907d1eb33acfce40f73f69532c75859b93f4a8

  • Size

    1.2MB

  • Sample

    241221-xl4plawpcx

  • MD5

    29cf7a842198ef25f5cddcaa7a0cd550

  • SHA1

    07349705587e37c7db8d0649c5b0cf6c4922ad2f

  • SHA256

    d9eb5cb200d5787f9d3a7a691c907d1eb33acfce40f73f69532c75859b93f4a8

  • SHA512

    19a716b255277fbc45187e865d2b692dfa7882b8ab517629e1ec7aa005ee10537d072704c9cfef83aafd28b28bc2ecf8a05e68ffff3ad2981f2f01665ebc6bb9

  • SSDEEP

    24576:xeAwskyF99cICfQ+s9pSw+X8ZA7jLvz/CPML4QADPKMVczbHzfvVV3Z3/S:k3sJFjcICs95+V7jzrCdy3

Malware Config

Targets

    • Target

      d9eb5cb200d5787f9d3a7a691c907d1eb33acfce40f73f69532c75859b93f4a8

    • Size

      1.2MB

    • MD5

      29cf7a842198ef25f5cddcaa7a0cd550

    • SHA1

      07349705587e37c7db8d0649c5b0cf6c4922ad2f

    • SHA256

      d9eb5cb200d5787f9d3a7a691c907d1eb33acfce40f73f69532c75859b93f4a8

    • SHA512

      19a716b255277fbc45187e865d2b692dfa7882b8ab517629e1ec7aa005ee10537d072704c9cfef83aafd28b28bc2ecf8a05e68ffff3ad2981f2f01665ebc6bb9

    • SSDEEP

      24576:xeAwskyF99cICfQ+s9pSw+X8ZA7jLvz/CPML4QADPKMVczbHzfvVV3Z3/S:k3sJFjcICs95+V7jzrCdy3

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks