General

  • Target

    b2c37e121231a0018737a227e679a20b032f75a612309213819228f81fc73b28

  • Size

    683KB

  • Sample

    241226-ntkf9avlfp

  • MD5

    fb53e60459cafd544642b1afb6a2b881

  • SHA1

    48cc8eb630ce8a63bb2385d217437eb742980ed8

  • SHA256

    b2c37e121231a0018737a227e679a20b032f75a612309213819228f81fc73b28

  • SHA512

    dd3e36e4f9387581d957f5db776bed7c25c39079457efad82b6c1cb5642bb7088fc8d91de4f0422c51f73373ce6507528672b72a30d6820e5c5ad44a861d0a87

  • SSDEEP

    12288:NI9AhaBup7b6z+60cyov0uJr58ut45De74ogrGA9yFO/72zK8oZZoS:N8Nk7b6z+fNxUiutMD84NiA8O/7V8

Malware Config

Targets

    • Target

      b2c37e121231a0018737a227e679a20b032f75a612309213819228f81fc73b28

    • Size

      683KB

    • MD5

      fb53e60459cafd544642b1afb6a2b881

    • SHA1

      48cc8eb630ce8a63bb2385d217437eb742980ed8

    • SHA256

      b2c37e121231a0018737a227e679a20b032f75a612309213819228f81fc73b28

    • SHA512

      dd3e36e4f9387581d957f5db776bed7c25c39079457efad82b6c1cb5642bb7088fc8d91de4f0422c51f73373ce6507528672b72a30d6820e5c5ad44a861d0a87

    • SSDEEP

      12288:NI9AhaBup7b6z+60cyov0uJr58ut45De74ogrGA9yFO/72zK8oZZoS:N8Nk7b6z+fNxUiutMD84NiA8O/7V8

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks