Analysis
-
max time kernel
146s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
27-11-2022 19:59
General
-
Target
3e47d81f8fbd39577a2e5d3a1f40382975ab4184c86831897b2160f86487f2cd.exe
-
Size
2.0MB
-
MD5
fbbc31bc4007a6fd9c2397e66f624fd6
-
SHA1
0f297147202d081d87a0907438ce802e85353a4e
-
SHA256
3e47d81f8fbd39577a2e5d3a1f40382975ab4184c86831897b2160f86487f2cd
-
SHA512
abf3f19027e80f134be8ab1d0bedd9d21324d77a4f243e6944340537743ece46bf418ea19d3666a512498fb78f40557b10a4e8cb6758d9597557681f1ee11c3a
-
SSDEEP
49152:BAGxfx4/o3QrgMkgJJ65jpz3b/b8P8ZdsSh3Q1:BA2fxYodn0Az3b8+hY
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 3 IoCs
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e47d81f8fbd39577a2e5d3a1f40382975ab4184c86831897b2160f86487f2cd.exe"C:\Users\Admin\AppData\Local\Temp\3e47d81f8fbd39577a2e5d3a1f40382975ab4184c86831897b2160f86487f2cd.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.8MB
-
Filesize
6.8MB
-
Filesize
6.8MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
6.8MB
-
Filesize
248KB