Analysis
-
max time kernel
186s -
max time network
190s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
29/10/2022, 10:30
General
-
Target
fe374962185a0e6a9d679bd08d4b41cd3dae39d3dd46dc92d0c7a37f02a8704a.exe
-
Size
124KB
-
MD5
eb47398eea4c3a0568821539b5ba3ec6
-
SHA1
75270ce58ea452f16239120fcb083a43337ab11b
-
SHA256
fe374962185a0e6a9d679bd08d4b41cd3dae39d3dd46dc92d0c7a37f02a8704a
-
SHA512
0741ebc6b1c2ba426c274cfcf2cdd681049f0a4a7c6d14ea99e92fc1f12b6fa0da895a1b2a30854f68082f55de46084fb4a3c6efd81af8c8762cce62f420b297
-
SSDEEP
1536:tI2Ke+YcGCvhmP/+IL4huyCjMbxObKR29aZMT0bnonql4TrCqrkHc6:tIiLcmP/+IEgy0MbxObVEMT07i2u6
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe374962185a0e6a9d679bd08d4b41cd3dae39d3dd46dc92d0c7a37f02a8704a.exe"C:\Users\Admin\AppData\Local\Temp\fe374962185a0e6a9d679bd08d4b41cd3dae39d3dd46dc92d0c7a37f02a8704a.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
508KB
-
Filesize
508KB
-
Filesize
508KB
-
Filesize
508KB