General

  • Target

    6cb5817145e539d8e22d632c146932537bb6f10faaa84ac6f742a64a72af1071

  • Size

    911KB

  • Sample

    241229-apzhqawnft

  • MD5

    a7c13c67f5de73babde428bc0e05dbf4

  • SHA1

    3d8a9529529ec44fc8ab1efa76f28423f6353f8a

  • SHA256

    6cb5817145e539d8e22d632c146932537bb6f10faaa84ac6f742a64a72af1071

  • SHA512

    6e1a7836076bc960a0d1d204f0cf3e03658ca19aecf1d93ea22601edd7b4f097c869e12dbe42992544c341bf5d9208b87e30dceb4fa2625a97068392da23948c

  • SSDEEP

    24576:OY+UB5TsjZ03clghyKm1QgRHYKPUQ4U3yzZy5gFxopB:OUbAjZ035mMOyDFxon

Malware Config

Targets

    • Target

      6cb5817145e539d8e22d632c146932537bb6f10faaa84ac6f742a64a72af1071

    • Size

      911KB

    • MD5

      a7c13c67f5de73babde428bc0e05dbf4

    • SHA1

      3d8a9529529ec44fc8ab1efa76f28423f6353f8a

    • SHA256

      6cb5817145e539d8e22d632c146932537bb6f10faaa84ac6f742a64a72af1071

    • SHA512

      6e1a7836076bc960a0d1d204f0cf3e03658ca19aecf1d93ea22601edd7b4f097c869e12dbe42992544c341bf5d9208b87e30dceb4fa2625a97068392da23948c

    • SSDEEP

      24576:OY+UB5TsjZ03clghyKm1QgRHYKPUQ4U3yzZy5gFxopB:OUbAjZ035mMOyDFxon

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks