General

  • Target

    7dcf64031c670626dd8de636f7cba405219fc8709d47d41a51d14c3ec0b9f51c

  • Size

    1.2MB

  • Sample

    241225-vhx2jazldp

  • MD5

    a0c3798ba305f38c6556ec2b17469a23

  • SHA1

    0d95fff25a340164ef5c5fd57dc68305189360ba

  • SHA256

    7dcf64031c670626dd8de636f7cba405219fc8709d47d41a51d14c3ec0b9f51c

  • SHA512

    de6613899c798bf3f3e6f977462dabf584dbd5f953134b5c20788ba6ba30c3316438b3348f1f5d9e13cfd6aec5b0f38c2c8b2c5876bfebf104542263e63cbebf

  • SSDEEP

    24576:/SAlQtzacMC8UqjvW0uRMj8B1+208BxKll5Tqu2pT5a:/flWWcWC0Tjbm6lL23a

Malware Config

Targets

    • Target

      7dcf64031c670626dd8de636f7cba405219fc8709d47d41a51d14c3ec0b9f51c

    • Size

      1.2MB

    • MD5

      a0c3798ba305f38c6556ec2b17469a23

    • SHA1

      0d95fff25a340164ef5c5fd57dc68305189360ba

    • SHA256

      7dcf64031c670626dd8de636f7cba405219fc8709d47d41a51d14c3ec0b9f51c

    • SHA512

      de6613899c798bf3f3e6f977462dabf584dbd5f953134b5c20788ba6ba30c3316438b3348f1f5d9e13cfd6aec5b0f38c2c8b2c5876bfebf104542263e63cbebf

    • SSDEEP

      24576:/SAlQtzacMC8UqjvW0uRMj8B1+208BxKll5Tqu2pT5a:/flWWcWC0Tjbm6lL23a

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks