Overview

overview

10

Static

static

b26b9c0b34...0b.dll

windows7-x64

8

b26b9c0b34...0b.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b26b9c0b3427cb95afe56ba9cf5b399e5e51f2a005de870674c39beb4bdbdc0b

  • Size

    1.4MB

  • Sample

    220916-myzajabcbk

  • MD5

    6082f4d4a2c791afdbca425dc9914048

  • SHA1

    02e563b41d6768a5cb47b550eb7441dcc9451099

  • SHA256

    b26b9c0b3427cb95afe56ba9cf5b399e5e51f2a005de870674c39beb4bdbdc0b

  • SHA512

    1451cce034a0795ed189a62487201c3a7c5779b834ad08aa54cc1c8e0c2ed253efb0da4e67f1affb339f6f15a7cf3602c75fe9d9919784ef50d222ece7072a46

  • SSDEEP

    24576:CsDQAneLB/YZ2hPjGvk4XauuTZkfWrVnkQd/23T4PB1kuQe/NAKQ84/Z:CO5n6bhqvquuHkQVB1ka/E/Z

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      b26b9c0b3427cb95afe56ba9cf5b399e5e51f2a005de870674c39beb4bdbdc0b

    • Size

      1.4MB

    • MD5

      6082f4d4a2c791afdbca425dc9914048

    • SHA1

      02e563b41d6768a5cb47b550eb7441dcc9451099

    • SHA256

      b26b9c0b3427cb95afe56ba9cf5b399e5e51f2a005de870674c39beb4bdbdc0b

    • SHA512

      1451cce034a0795ed189a62487201c3a7c5779b834ad08aa54cc1c8e0c2ed253efb0da4e67f1affb339f6f15a7cf3602c75fe9d9919784ef50d222ece7072a46

    • SSDEEP

      24576:CsDQAneLB/YZ2hPjGvk4XauuTZkfWrVnkQd/23T4PB1kuQe/NAKQ84/Z:CO5n6bhqvquuHkQVB1ka/E/Z

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks