Overview

overview

10

Static

static

e2553192a2...91.exe

windows7-x64

10

e2553192a2...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2553192a24ce7cc856c29e3d82c221b3dcbdc2b2e605342aa80c434328c9e91

  • Size

    111KB

  • Sample

    221127-jmzv5sec51

  • MD5

    5b610a9e433377509bfba253b70ad4b4

  • SHA1

    600fed6e8874fa2980570810aca4368f6865e9a7

  • SHA256

    e2553192a24ce7cc856c29e3d82c221b3dcbdc2b2e605342aa80c434328c9e91

  • SHA512

    1731e1934cc3304910f5791454be4a9867b8b0c0113003d7a674e719b6755d89c2ecc80abdbf6092ac5add95801205e1bce4ffed8cfe52341f39fe1b82bdaf66

  • SSDEEP

    1536:tI2Ke+YcGCvhmP/+IL4huyCjMbxObKR29aZMT0bnonql4TrCqrkHck:tIiLcmP/+IEgy0MbxObVEMT07i2uk

Score
10/10
blackmoonbankerpersistencetrojan

Malware Config

Targets

    • Target

      e2553192a24ce7cc856c29e3d82c221b3dcbdc2b2e605342aa80c434328c9e91

    • Size

      111KB

    • MD5

      5b610a9e433377509bfba253b70ad4b4

    • SHA1

      600fed6e8874fa2980570810aca4368f6865e9a7

    • SHA256

      e2553192a24ce7cc856c29e3d82c221b3dcbdc2b2e605342aa80c434328c9e91

    • SHA512

      1731e1934cc3304910f5791454be4a9867b8b0c0113003d7a674e719b6755d89c2ecc80abdbf6092ac5add95801205e1bce4ffed8cfe52341f39fe1b82bdaf66

    • SSDEEP

      1536:tI2Ke+YcGCvhmP/+IL4huyCjMbxObKR29aZMT0bnonql4TrCqrkHck:tIiLcmP/+IEgy0MbxObVEMT07i2uk

    Score
    10/10
    blackmoonbankertrojanpersistence

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Install Root Certificate

1
T1130

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks