Overview

overview

10

Static

static

10

a60616650b...e3.dll

windows7-x64

10

a60616650b...e3.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a60616650b4d63c0aade8adb1d62254dc2dc7b9f33a2d6f48bcc36f9d9a514e3

  • Size

    801KB

  • Sample

    221107-kppzdsgef2

  • MD5

    0851ddf2468525905ac84b6afc397d40

  • SHA1

    539baa1c128bb50389d9f3173875638c0f859005

  • SHA256

    a60616650b4d63c0aade8adb1d62254dc2dc7b9f33a2d6f48bcc36f9d9a514e3

  • SHA512

    127f077eb01c320a6551e6555698835950bec3c9151c2b5f0e17acd2d218b907082b85d463afed87165d52085e793c18b370a1a47ea4211ad880456696f3b024

  • SSDEEP

    24576:W1TnaIajDr1HkJ/orzi1Y5TagXN630pYZFw:wmpH7IYRd630GZ6

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      a60616650b4d63c0aade8adb1d62254dc2dc7b9f33a2d6f48bcc36f9d9a514e3

    • Size

      801KB

    • MD5

      0851ddf2468525905ac84b6afc397d40

    • SHA1

      539baa1c128bb50389d9f3173875638c0f859005

    • SHA256

      a60616650b4d63c0aade8adb1d62254dc2dc7b9f33a2d6f48bcc36f9d9a514e3

    • SHA512

      127f077eb01c320a6551e6555698835950bec3c9151c2b5f0e17acd2d218b907082b85d463afed87165d52085e793c18b370a1a47ea4211ad880456696f3b024

    • SSDEEP

      24576:W1TnaIajDr1HkJ/orzi1Y5TagXN630pYZFw:wmpH7IYRd630GZ6

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks