General

  • Target

    c861e77367e1bf26df98c7a296e892be0377d3198135e7e195be937e327171fb

  • Size

    684KB

  • Sample

    241225-r4fslawjbl

  • MD5

    508467140e27bc22ee4a2eebba0bf927

  • SHA1

    c6a52616d9fdc6a98e1001bb9d5d7106e4c48f51

  • SHA256

    c861e77367e1bf26df98c7a296e892be0377d3198135e7e195be937e327171fb

  • SHA512

    970bca5de2076b5ff0f1f6da456a8a78c853de79e43ac7e0565ca3897f7071fe2af23284139eb609086bbc0a036d7829afbd415af59342011cd20d247f8edcee

  • SSDEEP

    12288:EoS94rR2loEDy1ff3qJacH9JS9wVycOALjiYC4sRsviBcUI8y8KSfuO51oS:enlovffqgIS2oHALARcKczRL

Malware Config

Targets

    • Target

      c861e77367e1bf26df98c7a296e892be0377d3198135e7e195be937e327171fb

    • Size

      684KB

    • MD5

      508467140e27bc22ee4a2eebba0bf927

    • SHA1

      c6a52616d9fdc6a98e1001bb9d5d7106e4c48f51

    • SHA256

      c861e77367e1bf26df98c7a296e892be0377d3198135e7e195be937e327171fb

    • SHA512

      970bca5de2076b5ff0f1f6da456a8a78c853de79e43ac7e0565ca3897f7071fe2af23284139eb609086bbc0a036d7829afbd415af59342011cd20d247f8edcee

    • SSDEEP

      12288:EoS94rR2loEDy1ff3qJacH9JS9wVycOALjiYC4sRsviBcUI8y8KSfuO51oS:enlovffqgIS2oHALARcKczRL

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks