General

  • Target

    1ce95ee34157ca2bbedd7f379e6dfdaf61aae0e0c9c2927e361fabf77793b452

  • Size

    715KB

  • Sample

    241227-yemyyaymgq

  • MD5

    21d60c01bc59841304e7b098ccac1f3b

  • SHA1

    3ae02f6d2762f9ff3f9b42300fd97be6e56a0d85

  • SHA256

    1ce95ee34157ca2bbedd7f379e6dfdaf61aae0e0c9c2927e361fabf77793b452

  • SHA512

    fa5c0f8112533a46293532f175567cb70c0b2b866c0b9e4dd63dd46864273d7620fac1b66a81c3e865a2366a56ea080e3a5635afa67ff8eba4435cd9e5e04ac2

  • SSDEEP

    12288:lAGmE6UUKFxlZ34RLOSSF7hGOXMxXzfqsMEVilci+lRarTCmQeUoS:41/oRwSFNTMJfM1WPqKe

Malware Config

Targets

    • Target

      1ce95ee34157ca2bbedd7f379e6dfdaf61aae0e0c9c2927e361fabf77793b452

    • Size

      715KB

    • MD5

      21d60c01bc59841304e7b098ccac1f3b

    • SHA1

      3ae02f6d2762f9ff3f9b42300fd97be6e56a0d85

    • SHA256

      1ce95ee34157ca2bbedd7f379e6dfdaf61aae0e0c9c2927e361fabf77793b452

    • SHA512

      fa5c0f8112533a46293532f175567cb70c0b2b866c0b9e4dd63dd46864273d7620fac1b66a81c3e865a2366a56ea080e3a5635afa67ff8eba4435cd9e5e04ac2

    • SSDEEP

      12288:lAGmE6UUKFxlZ34RLOSSF7hGOXMxXzfqsMEVilci+lRarTCmQeUoS:41/oRwSFNTMJfM1WPqKe

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

MITRE ATT&CK Enterprise v15

Tasks