Overview

overview

10

Static

static

47402e79d6...35.dll

windows7-x64

10

47402e79d6...35.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47402e79d69e9175aeb4fec7c7de1da0eef55f32b5fcff154e09113d76ac4335

  • Size

    1.5MB

  • Sample

    221011-1fc68sfdhl

  • MD5

    79737781daf4722e1ab2f9352432bace

  • SHA1

    18b0be640606f18568bb99fa855cd92c1187fdc0

  • SHA256

    47402e79d69e9175aeb4fec7c7de1da0eef55f32b5fcff154e09113d76ac4335

  • SHA512

    db551edaebab25534073f24abff0923243a024180fead9d8578731efb2a8a6c1d5d5c75b9bf3d5ece705fedb8db0b3447d48689749b4b43ced7bc00bec16362f

  • SSDEEP

    24576:bLdO8OuXuAdZfbEDgh5tos05jvzMsyyXDYPFH0wevdEVNskchy7JGxmpSfUJWUuG:bJfOuejDghStDkPovdoUy9jpHuX

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      47402e79d69e9175aeb4fec7c7de1da0eef55f32b5fcff154e09113d76ac4335

    • Size

      1.5MB

    • MD5

      79737781daf4722e1ab2f9352432bace

    • SHA1

      18b0be640606f18568bb99fa855cd92c1187fdc0

    • SHA256

      47402e79d69e9175aeb4fec7c7de1da0eef55f32b5fcff154e09113d76ac4335

    • SHA512

      db551edaebab25534073f24abff0923243a024180fead9d8578731efb2a8a6c1d5d5c75b9bf3d5ece705fedb8db0b3447d48689749b4b43ced7bc00bec16362f

    • SSDEEP

      24576:bLdO8OuXuAdZfbEDgh5tos05jvzMsyyXDYPFH0wevdEVNskchy7JGxmpSfUJWUuG:bJfOuejDghStDkPovdoUy9jpHuX

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks