General

  • Target

    3ba94b9ddc1c3c688b9b0143f7871ef26678f34b5fac72965da63dcb28b0369aN.exe

  • Size

    54KB

  • Sample

    250111-hkqn1sskdn

  • MD5

    61301f67b5b57197dd53e55360de5c20

  • SHA1

    6a233d2a5657e010637d60dd8fc0d9428bb4eee7

  • SHA256

    3ba94b9ddc1c3c688b9b0143f7871ef26678f34b5fac72965da63dcb28b0369a

  • SHA512

    5936015718734b7d68f56695704b23f29a1f95bdb3281c79235aefb33e3130aa899cba54927548cae6f69cacbc02529a434093d25af2068e8cfba229b067cb75

  • SSDEEP

    1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvlNJM:0cdpeeBSHHMHLf9RyIEK

Malware Config

Targets

    • Target

      3ba94b9ddc1c3c688b9b0143f7871ef26678f34b5fac72965da63dcb28b0369aN.exe

    • Size

      54KB

    • MD5

      61301f67b5b57197dd53e55360de5c20

    • SHA1

      6a233d2a5657e010637d60dd8fc0d9428bb4eee7

    • SHA256

      3ba94b9ddc1c3c688b9b0143f7871ef26678f34b5fac72965da63dcb28b0369a

    • SHA512

      5936015718734b7d68f56695704b23f29a1f95bdb3281c79235aefb33e3130aa899cba54927548cae6f69cacbc02529a434093d25af2068e8cfba229b067cb75

    • SSDEEP

      1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvlNJM:0cdpeeBSHHMHLf9RyIEK

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks