Overview

overview

10

Static

static

10

AntiVC.dll

windows7-x64

1

AntiVC.dll

windows10-2004-x64

1

register.exe

windows7-x64

10

register.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0862dfb83d927119ac4ded2f9159e5307bcbb3be13aff08076c509aed806447

  • Size

    545KB

  • Sample

    221124-j3tdasdf5t

  • MD5

    a52a4145f86cd91a62e93a98159db4dd

  • SHA1

    bcc2c62cc75731849e5199f80570fe98a05491f3

  • SHA256

    a0862dfb83d927119ac4ded2f9159e5307bcbb3be13aff08076c509aed806447

  • SHA512

    55aa81dd71d57b7b56b2dc0c40f2d03927ac5ca5ca3d1b96e6fd5edc37fb71b83c57c7a1e476853df242a22903c19f844b998b106790b0494f39ba1444b5fd25

  • SSDEEP

    12288:CQEGRSTSFJ+A1PHlko8/ehmXTKUhOV9KlnlCT1DPIGJJM2ZS61H:WG4S6KNkvwmXMmorlcOT

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      AntiVC.dll

    • Size

      47KB

    • MD5

      ed0c74815e4d0c37563d89c7af54f2cc

    • SHA1

      f12d4e876740769fe8c81fa421827140c8a0cf4e

    • SHA256

      f07eb8723995cf5c90bad1a3fa3bc6419dad3952f238413c9b62d1f8ef292945

    • SHA512

      0bccb938bca4f4546879119d81a2e7fe88552f87ab7e3cdfe7b70cd7bbcd847a607ff9e4423448e6bd87ffb901780041ad4fae1261ae7adbece53654935fc4ab

    • SSDEEP

      768:iaxaL4XsKTYnbdofZpyBXStk4OJ5dIuUCy/s724bMMzxTnefg7hWyfew420pIOTc:x/XsDufXOXck4ODSCyUS4r9Tefg7aWSU

    Score
    1/10
    behavioral1behavioral2

    • Target

      register.exe

    • Size

      672KB

    • MD5

      e8f82a2cc983032396d460fd79177505

    • SHA1

      4f2e6d9fbfee5c6ec36c1b377d201231a2379196

    • SHA256

      7aeb95508722fd133827a373b1c3a5d7a1128ad0870d883ef853aefdbfe0894b

    • SHA512

      5ec63ff7a7d87474116099b7d989414ca9e9b8b14b553d5a6ec14f58cc0e083d039e429f4199d5aca523f13d836d006849fd9ae6658baa46f081d4bcd7e5ee20

    • SSDEEP

      12288:byspkLBD00kEZYjwu8lhlHmRiz2fN1zM4WbJQ4Odf:bysp400kEIv8lzHmEKfN1zMB

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks