Overview

overview

10

Static

static

68b91648d5...d2.dll

windows7-x64

8

68b91648d5...d2.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    68b91648d56b99dc5c14f2f151ef36410eee77cc7c6b916420ad1935809d61d2

  • Size

    1.5MB

  • Sample

    221125-mxbsvabf42

  • MD5

    b489e5d2c4c585af3d3149439b478155

  • SHA1

    d2dad11492bde46c9adcbcc830f8df778282dd84

  • SHA256

    68b91648d56b99dc5c14f2f151ef36410eee77cc7c6b916420ad1935809d61d2

  • SHA512

    b280420e2b859171cc8ff8bfc68c4b1e8249bf0302d7037800d4ad4927a34e8cf04ca234919b6a609f0b2f47fb0951c5982e8fe6cb9f488e86c89a6005d5ac3f

  • SSDEEP

    24576:Gx0YK+I4ZIxYWu/CGaJ4tBv8aN5ekIILRCdZPgv6KICHJqPvvN4dThZT:Gx0YNwPuxt9DekN+tgvHMK7Z

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      68b91648d56b99dc5c14f2f151ef36410eee77cc7c6b916420ad1935809d61d2

    • Size

      1.5MB

    • MD5

      b489e5d2c4c585af3d3149439b478155

    • SHA1

      d2dad11492bde46c9adcbcc830f8df778282dd84

    • SHA256

      68b91648d56b99dc5c14f2f151ef36410eee77cc7c6b916420ad1935809d61d2

    • SHA512

      b280420e2b859171cc8ff8bfc68c4b1e8249bf0302d7037800d4ad4927a34e8cf04ca234919b6a609f0b2f47fb0951c5982e8fe6cb9f488e86c89a6005d5ac3f

    • SSDEEP

      24576:Gx0YK+I4ZIxYWu/CGaJ4tBv8aN5ekIILRCdZPgv6KICHJqPvvN4dThZT:Gx0YNwPuxt9DekN+tgvHMK7Z

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks