Analysis
-
max time kernel
47s -
max time network
94s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
27/11/2022, 15:40
General
-
Target
8e705fda7c051a9eb3aeb3f649afaeb060e20fe460eb8ab7821292cae0721011.exe
-
Size
83KB
-
MD5
07e852273c5d571f155573e1dcd4ceea
-
SHA1
3d41b70cc2e29a6ab0f8fc9a151d0b422bac5697
-
SHA256
8e705fda7c051a9eb3aeb3f649afaeb060e20fe460eb8ab7821292cae0721011
-
SHA512
569a94d14b6daede91fb648cd70f58b3cd7419ee286fdfd398fac2b39eb97c02c22812f1cbd786d72a368e5dd1f354f9e3e559cf393949731b969328f61a6ebc
-
SSDEEP
1536:V+Dy3Epmu71qKi4HJ+/fvl1Cp3HgBT2Wj1fmt8KQpTuz+qGRz+UZN+mmPlDcnouO:kDeubiNvl1CpcJmTyuz+qq+U/+mSyouS
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 2 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e705fda7c051a9eb3aeb3f649afaeb060e20fe460eb8ab7821292cae0721011.exe"C:\Users\Admin\AppData\Local\Temp\8e705fda7c051a9eb3aeb3f649afaeb060e20fe460eb8ab7821292cae0721011.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
360KB
-
Filesize
8KB
-
Filesize
360KB
-
Filesize
360KB