General

  • Target

    ea8f8197f419ae78754494797c0ab241258cf31ac174e420af780fac63a8315e

  • Size

    719KB

  • Sample

    241221-y48xpsymht

  • MD5

    1b84454cf7dc70fa5e8850986efebe4e

  • SHA1

    542660030460219c2e0e9166cfe9562a761b25e9

  • SHA256

    ea8f8197f419ae78754494797c0ab241258cf31ac174e420af780fac63a8315e

  • SHA512

    1ab02ac396f9dda2d63eb5479cad80c703418ac1a8d0fd147ef9ca88a2bdf32ca7239173f3043a26f2f71edbd4118cd0b572117db02ce4864e92f3ff4d466838

  • SSDEEP

    12288:KR0m2R7yWV2RAcyy4oZZzfLeU1jxL/5SKeRdTPTmYvDOsDAx1zWZcVoS:or2T2RRyy4obfh1jxLMnTPCYvDvDAuZc

Malware Config

Targets

    • Target

      ea8f8197f419ae78754494797c0ab241258cf31ac174e420af780fac63a8315e

    • Size

      719KB

    • MD5

      1b84454cf7dc70fa5e8850986efebe4e

    • SHA1

      542660030460219c2e0e9166cfe9562a761b25e9

    • SHA256

      ea8f8197f419ae78754494797c0ab241258cf31ac174e420af780fac63a8315e

    • SHA512

      1ab02ac396f9dda2d63eb5479cad80c703418ac1a8d0fd147ef9ca88a2bdf32ca7239173f3043a26f2f71edbd4118cd0b572117db02ce4864e92f3ff4d466838

    • SSDEEP

      12288:KR0m2R7yWV2RAcyy4oZZzfLeU1jxL/5SKeRdTPTmYvDOsDAx1zWZcVoS:or2T2RRyy4obfh1jxLMnTPCYvDvDAuZc

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks