blackmoon | b444a27a44836f91f4affaea876b92cb63ad245f0dc940b9d2bd132068426a99 | Triage

Sharing

General

Target

b444a27a44836f91f4affaea876b92cb63ad245f0dc940b9d2bd132068426a99
Size

224KB
Sample

241229-a1w7qswrcs
MD5

8bd31b12330fc5d4ae276405d863f26b
SHA1

1c2e823835691ff0948ac6ed7cf09cc3043efab0
SHA256

b444a27a44836f91f4affaea876b92cb63ad245f0dc940b9d2bd132068426a99
SHA512

247c5dc78775e1042382d2aea042848fc67a023a36bc26885df24f0ba62215b390f1b0f30bf84b1fca99f882f30098f8d1ef02be8f4bbc13dc9a0a659a6bea13
SSDEEP

3072:xMxWh3aZTBt+7GO46RtmaVY812GBwX8LUdxdjd903cQeJQzs9GPmOYKtfUvYIPu:eQ7GO46YLxdjd9OFzsgCPYr

Score

10^/10

blackmoon discovery

Malware Config

Targets

- Target
  
  b444a27a44836f91f4affaea876b92cb63ad245f0dc940b9d2bd132068426a99
- Size
  
  224KB
- MD5
  
  8bd31b12330fc5d4ae276405d863f26b
- SHA1
  
  1c2e823835691ff0948ac6ed7cf09cc3043efab0
- SHA256
  
  b444a27a44836f91f4affaea876b92cb63ad245f0dc940b9d2bd132068426a99
- SHA512
  
  247c5dc78775e1042382d2aea042848fc67a023a36bc26885df24f0ba62215b390f1b0f30bf84b1fca99f882f30098f8d1ef02be8f4bbc13dc9a0a659a6bea13
- SSDEEP
  
  3072:xMxWh3aZTBt+7GO46RtmaVY812GBwX8LUdxdjd903cQeJQzs9GPmOYKtfUvYIPu:eQ7GO46YLxdjd9OFzsgCPYr
Score

8^/10

discovery
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2