General

  • Target

    801bd9c3360c28c3bcd12653bfcd4776582de4a4e1f78678610cc41998bf492bN.exe

  • Size

    54KB

  • Sample

    241226-jvak8azphy

  • MD5

    c45df4ea0a871798ae849a406b09a740

  • SHA1

    251f7c076c33504ba80f0f4d10cb97388a89f1e1

  • SHA256

    801bd9c3360c28c3bcd12653bfcd4776582de4a4e1f78678610cc41998bf492b

  • SHA512

    89979745d22016cafa244dcd62d18d471c4413f3daf9375769f2db0bc817ebb94ac99ae581612d00a7ea264da3f74d8cc6a6b81715b842d439023ccddac7f22c

  • SSDEEP

    1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvlNJVC:0cdpeeBSHHMHLf9RyIETC

Malware Config

Targets

    • Target

      801bd9c3360c28c3bcd12653bfcd4776582de4a4e1f78678610cc41998bf492bN.exe

    • Size

      54KB

    • MD5

      c45df4ea0a871798ae849a406b09a740

    • SHA1

      251f7c076c33504ba80f0f4d10cb97388a89f1e1

    • SHA256

      801bd9c3360c28c3bcd12653bfcd4776582de4a4e1f78678610cc41998bf492b

    • SHA512

      89979745d22016cafa244dcd62d18d471c4413f3daf9375769f2db0bc817ebb94ac99ae581612d00a7ea264da3f74d8cc6a6b81715b842d439023ccddac7f22c

    • SSDEEP

      1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvlNJVC:0cdpeeBSHHMHLf9RyIETC

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks