Overview

overview

10

Static

static

8

5369ea2b30...4f.dll

windows7-x64

10

5369ea2b30...4f.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5369ea2b3077ac2a456ffda76c950eb3083802d1620e660f4fb812ca157e1b4f

  • Size

    362KB

  • Sample

    221129-k3cwzshc3v

  • MD5

    00b7a9715400fda706498d14a302bc20

  • SHA1

    7b2dbefeed432a9a9d47e745771380bf03f61813

  • SHA256

    5369ea2b3077ac2a456ffda76c950eb3083802d1620e660f4fb812ca157e1b4f

  • SHA512

    3b981076a413146d6d61a0030294a75e2ca041cf8e03847b28f8b83e2fd512c4002edccc8ee326462579ea5f825da431606af61cc04a0dc9794c980ba555b33a

  • SSDEEP

    6144:3ypyJE1S5ND31zwdHlWbEaScp8FSBuRTY2o56oxW8eYkYM6y:3ysJE1SrDlzulWbEaNp8ABATY246oMTD

Score
10/10
blackmoonbankertrojanvmprotect

Malware Config

Targets

    • Target

      5369ea2b3077ac2a456ffda76c950eb3083802d1620e660f4fb812ca157e1b4f

    • Size

      362KB

    • MD5

      00b7a9715400fda706498d14a302bc20

    • SHA1

      7b2dbefeed432a9a9d47e745771380bf03f61813

    • SHA256

      5369ea2b3077ac2a456ffda76c950eb3083802d1620e660f4fb812ca157e1b4f

    • SHA512

      3b981076a413146d6d61a0030294a75e2ca041cf8e03847b28f8b83e2fd512c4002edccc8ee326462579ea5f825da431606af61cc04a0dc9794c980ba555b33a

    • SSDEEP

      6144:3ypyJE1S5ND31zwdHlWbEaScp8FSBuRTY2o56oxW8eYkYM6y:3ysJE1SrDlzulWbEaNp8ABATY246oMTD

    Score
    10/10
    blackmoonbankertrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks