Overview

overview

10

Static

static

8

8e66a800c6...d7.dll

windows7-x64

10

8e66a800c6...d7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e66a800c651d80f93578dff124f7cb87ba164b5b603d0118b7c6ea5f0d9f6d7

  • Size

    361KB

  • Sample

    221129-garynaae26

  • MD5

    fe8c5f0de53e58b4212a85f5968aff20

  • SHA1

    c3f311d403beeae864bad2f7457b28d1e07a46a1

  • SHA256

    8e66a800c651d80f93578dff124f7cb87ba164b5b603d0118b7c6ea5f0d9f6d7

  • SHA512

    6047534211236c2b5daa9791a9e75330a65974fc628fbd11bb482d9715ebd873325a195bd5ca7ebe771f603d6801b51ced633d9c4690e761fbe2d390fd25617e

  • SSDEEP

    6144:3ypyJE1S5ND31zwdHlWbEaScp8FSBuRTY2o56oxW8eYkYM6y:3ysJE1SrDlzulWbEaNp8ABATY246oMTD

Score
10/10
blackmoonbankertrojanvmprotect

Malware Config

Targets

    • Target

      8e66a800c651d80f93578dff124f7cb87ba164b5b603d0118b7c6ea5f0d9f6d7

    • Size

      361KB

    • MD5

      fe8c5f0de53e58b4212a85f5968aff20

    • SHA1

      c3f311d403beeae864bad2f7457b28d1e07a46a1

    • SHA256

      8e66a800c651d80f93578dff124f7cb87ba164b5b603d0118b7c6ea5f0d9f6d7

    • SHA512

      6047534211236c2b5daa9791a9e75330a65974fc628fbd11bb482d9715ebd873325a195bd5ca7ebe771f603d6801b51ced633d9c4690e761fbe2d390fd25617e

    • SSDEEP

      6144:3ypyJE1S5ND31zwdHlWbEaScp8FSBuRTY2o56oxW8eYkYM6y:3ysJE1SrDlzulWbEaNp8ABATY246oMTD

    Score
    10/10
    blackmoonbankertrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks