blackmoon | f7f1b57620abce5578312960f4d9c32109749d404ec9987806826955adc11d0b | Triage

Submit
Reports

Overview

overview

Static

static

f7f1b57620...0b.exe

windows7-x64

f7f1b57620...0b.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

f7f1b57620abce5578312960f4d9c32109749d404ec9987806826955adc11d0b
Size

128KB
Sample

221127-2bv2xsdb65
MD5

c50ca6f20395e4167d4d893a2e906d0f
SHA1

f18ab50786e34cce21d6072e412c5fd18ac55c4e
SHA256

f7f1b57620abce5578312960f4d9c32109749d404ec9987806826955adc11d0b
SHA512

c538faa08ab226522db515c66984320b369bcb6352058446dce0ee41b5ab93ec02d2055bd7230969df5c41c41049ea00ba6a108fa931e0d03a5ae511aa3f2014
SSDEEP

3072:W9aL+fxsFJzV6nKTbFvfARSu3peuyoKyAwEilIa2HOHEe9E5EUq:r+qnRAIbFvfAv3k/YhEVa2ukrEUq

Score

10^/10

blackmoon banker persistence trojan

Static task

static1

Behavioral task

behavioral1

Sample

f7f1b57620abce5578312960f4d9c32109749d404ec9987806826955adc11d0b.exe

Resource

win7-20221111-en

blackmoon banker persistence trojan

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

f7f1b57620abce5578312960f4d9c32109749d404ec9987806826955adc11d0b.exe

Resource

win10v2004-20220812-en

blackmoon banker persistence trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  f7f1b57620abce5578312960f4d9c32109749d404ec9987806826955adc11d0b
- Size
  
  128KB
- MD5
  
  c50ca6f20395e4167d4d893a2e906d0f
- SHA1
  
  f18ab50786e34cce21d6072e412c5fd18ac55c4e
- SHA256
  
  f7f1b57620abce5578312960f4d9c32109749d404ec9987806826955adc11d0b
- SHA512
  
  c538faa08ab226522db515c66984320b369bcb6352058446dce0ee41b5ab93ec02d2055bd7230969df5c41c41049ea00ba6a108fa931e0d03a5ae511aa3f2014
- SSDEEP
  
  3072:W9aL+fxsFJzV6nKTbFvfARSu3peuyoKyAwEilIa2HOHEe9E5EUq:r+qnRAIbFvfAv3k/YhEVa2ukrEUq
Score

10^/10

blackmoon banker persistence trojan
- Blackmoon, KrBanker
  Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
  trojan banker blackmoon
- Detect Blackmoon payload
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blackmoonbankerpersistencetrojan

behavioral2

blackmoonbankerpersistencetrojan

© 2018-2025

Terms | Privacy