General

  • Target

    40566b3e8b25a3a39bb006030305822f220d7d34ba201e97d1f6d178f6cdb680

  • Size

    694KB

  • Sample

    241226-jkrrrazqer

  • MD5

    25ae131be523e2c8f5cf3a2530702415

  • SHA1

    316994241b1cfef4715e5dcd4164c7160b6237d3

  • SHA256

    40566b3e8b25a3a39bb006030305822f220d7d34ba201e97d1f6d178f6cdb680

  • SHA512

    fe69c7f8bd1ade4718a44d354ae6d7edadd37c819db5c18371dbd9891ffb5cb4c1765a1c822de5acab26887f1dbd5d603f5bb898e8f2ad9931e7712de32d8735

  • SSDEEP

    12288:fBQ8wR8WYpebEwnDbDYgt2B+FGD0BDMhndZ8ypSD6SluTVGLAlcv7A8WFfcj+0oS:5qOWIC1n/DJl+oAhdZ8yp66cIkLc6

Malware Config

Targets

    • Target

      40566b3e8b25a3a39bb006030305822f220d7d34ba201e97d1f6d178f6cdb680

    • Size

      694KB

    • MD5

      25ae131be523e2c8f5cf3a2530702415

    • SHA1

      316994241b1cfef4715e5dcd4164c7160b6237d3

    • SHA256

      40566b3e8b25a3a39bb006030305822f220d7d34ba201e97d1f6d178f6cdb680

    • SHA512

      fe69c7f8bd1ade4718a44d354ae6d7edadd37c819db5c18371dbd9891ffb5cb4c1765a1c822de5acab26887f1dbd5d603f5bb898e8f2ad9931e7712de32d8735

    • SSDEEP

      12288:fBQ8wR8WYpebEwnDbDYgt2B+FGD0BDMhndZ8ypSD6SluTVGLAlcv7A8WFfcj+0oS:5qOWIC1n/DJl+oAhdZ8yp66cIkLc6

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks