General

  • Target

    b2da9fc1d410876074784f886175152c92eed6409a2f6d6890ad88da52989430.exe

  • Size

    79KB

  • Sample

    241226-qct1gawmat

  • MD5

    5ca31353af0df933ff43e4068224be68

  • SHA1

    67a4c51abfa77f0d9809d5ceaa4f0f96ef707b6a

  • SHA256

    b2da9fc1d410876074784f886175152c92eed6409a2f6d6890ad88da52989430

  • SHA512

    2c7ff61d758c305cfac5a664f6786a7cca5423704b538bc463ff7ff2009ba01f31dedc1b782c470f3e4d9999c1266201d2faf0e71aa59b420b67cd2f6e0ff2f3

  • SSDEEP

    1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5bx7DUQeDac7AkE:0cdpeeBSHHMHLf9Rybx7DYec7FE

Malware Config

Targets

    • Target

      b2da9fc1d410876074784f886175152c92eed6409a2f6d6890ad88da52989430.exe

    • Size

      79KB

    • MD5

      5ca31353af0df933ff43e4068224be68

    • SHA1

      67a4c51abfa77f0d9809d5ceaa4f0f96ef707b6a

    • SHA256

      b2da9fc1d410876074784f886175152c92eed6409a2f6d6890ad88da52989430

    • SHA512

      2c7ff61d758c305cfac5a664f6786a7cca5423704b538bc463ff7ff2009ba01f31dedc1b782c470f3e4d9999c1266201d2faf0e71aa59b420b67cd2f6e0ff2f3

    • SSDEEP

      1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5bx7DUQeDac7AkE:0cdpeeBSHHMHLf9Rybx7DYec7FE

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks