Analysis
-
max time kernel
44s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
23/11/2022, 22:06
General
-
Target
c0ce35fff000de18c1922abd07dfa15dcf1b454f9731f1dbc54b4dacce10372c.exe
-
Size
346KB
-
MD5
4380c94ac08b875164099bf823718977
-
SHA1
6e2c02f8f7239db3457a99922e7bf0debe7e7a34
-
SHA256
c0ce35fff000de18c1922abd07dfa15dcf1b454f9731f1dbc54b4dacce10372c
-
SHA512
ef06913d1179795201cb7525ab31022a7c2505d23edfc385f0fd2f04fd7547b45a831f3b09d7877d2d31d7f8e81c15e1fe5500ecb36b25a1e0326f8f2afc6a23
-
SSDEEP
6144:xbyPoGLeYLNQW6edPkQNDyECguGYzEcDiryKyGbG+0zJ7QljOsO8VfVxc9UpIlry:xyPPLn76alN3B7YzRDe4GarJ7QljR1Vv
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 3 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c0ce35fff000de18c1922abd07dfa15dcf1b454f9731f1dbc54b4dacce10372c.exe"C:\Users\Admin\AppData\Local\Temp\c0ce35fff000de18c1922abd07dfa15dcf1b454f9731f1dbc54b4dacce10372c.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.3MB