General

  • Target

    8b78e4a870372ede7622c024335bab7c307f61808384034c476dd2440024cc5f

  • Size

    61KB

  • Sample

    250218-c2zelawmcm

  • MD5

    f2c1b49e9873f3f1a4baa2b407b87308

  • SHA1

    0f1545db8235abd2602d76bc95d573c59f0001bb

  • SHA256

    8b78e4a870372ede7622c024335bab7c307f61808384034c476dd2440024cc5f

  • SHA512

    3976b702d5721fb24e52a83fbf7d5d34799f312c80d37d98c3ffcdb925b4cc858f5e9f6bbbd0f4fd060013e6e95e373277e20bede98b0a9fdb677b08e992af7f

  • SSDEEP

    1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvlNJiT:0cdpeeBSHHMHLf9RyIEQT

Malware Config

Targets

    • Target

      8b78e4a870372ede7622c024335bab7c307f61808384034c476dd2440024cc5f

    • Size

      61KB

    • MD5

      f2c1b49e9873f3f1a4baa2b407b87308

    • SHA1

      0f1545db8235abd2602d76bc95d573c59f0001bb

    • SHA256

      8b78e4a870372ede7622c024335bab7c307f61808384034c476dd2440024cc5f

    • SHA512

      3976b702d5721fb24e52a83fbf7d5d34799f312c80d37d98c3ffcdb925b4cc858f5e9f6bbbd0f4fd060013e6e95e373277e20bede98b0a9fdb677b08e992af7f

    • SSDEEP

      1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvlNJiT:0cdpeeBSHHMHLf9RyIEQT

    • Blackmoon family

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks