General

  • Target

    93c5fb92f541cd2ae9283d378ce174c1c000094484126c80162fe22c08d06f01N.exe

  • Size

    79KB

  • Sample

    241225-zt5b7sxqdq

  • MD5

    c7f3544c6cb49e9b7e6290069813b5b0

  • SHA1

    984448f3a738ed2d811de5f4addfe0e77c813f9c

  • SHA256

    93c5fb92f541cd2ae9283d378ce174c1c000094484126c80162fe22c08d06f01

  • SHA512

    de3f47d691d41493493ed986cc67a0ec84749541a7934efb909bd7aa9e7c0504fa07000e3f3ee2dc366ac61b0728a429f0636e3cf08a7c507fcf69a3992bdf02

  • SSDEEP

    1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5bx7DUQeDac7Akc:0cdpeeBSHHMHLf9Rybx7DYec7Fc

Malware Config

Targets

    • Target

      93c5fb92f541cd2ae9283d378ce174c1c000094484126c80162fe22c08d06f01N.exe

    • Size

      79KB

    • MD5

      c7f3544c6cb49e9b7e6290069813b5b0

    • SHA1

      984448f3a738ed2d811de5f4addfe0e77c813f9c

    • SHA256

      93c5fb92f541cd2ae9283d378ce174c1c000094484126c80162fe22c08d06f01

    • SHA512

      de3f47d691d41493493ed986cc67a0ec84749541a7934efb909bd7aa9e7c0504fa07000e3f3ee2dc366ac61b0728a429f0636e3cf08a7c507fcf69a3992bdf02

    • SSDEEP

      1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5bx7DUQeDac7Akc:0cdpeeBSHHMHLf9Rybx7DYec7Fc

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks