General

  • Target

    a8a972a1c0015eb2620248571e79d38019e5d6a797e03b2c6891fc805adc1b95

  • Size

    717KB

  • Sample

    241226-ntkf9avkbt

  • MD5

    b1f4f11fa586e9803facb9065c92b54d

  • SHA1

    77e5db06b2d21828f14e8f5b8dd608c30b29c455

  • SHA256

    a8a972a1c0015eb2620248571e79d38019e5d6a797e03b2c6891fc805adc1b95

  • SHA512

    25a8641ae8348af25514d06f8c6bb7847897f06536de5fefcd0016ca36cb74987e25cca7d3b21b889b08159644948959c7a3f8aee837b696b9eb0746d662b09c

  • SSDEEP

    12288:KD358AomNleOkAYEv8gDwOKdJRj2AiUxluuZTcDB9vA+hatjCw+pMPFoS:gLbx5V8gDHQRj2W375cD3Y+stewcMP

Malware Config

Targets

    • Target

      a8a972a1c0015eb2620248571e79d38019e5d6a797e03b2c6891fc805adc1b95

    • Size

      717KB

    • MD5

      b1f4f11fa586e9803facb9065c92b54d

    • SHA1

      77e5db06b2d21828f14e8f5b8dd608c30b29c455

    • SHA256

      a8a972a1c0015eb2620248571e79d38019e5d6a797e03b2c6891fc805adc1b95

    • SHA512

      25a8641ae8348af25514d06f8c6bb7847897f06536de5fefcd0016ca36cb74987e25cca7d3b21b889b08159644948959c7a3f8aee837b696b9eb0746d662b09c

    • SSDEEP

      12288:KD358AomNleOkAYEv8gDwOKdJRj2AiUxluuZTcDB9vA+hatjCw+pMPFoS:gLbx5V8gDHQRj2W375cD3Y+stewcMP

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks