Overview

overview

10

Static

static

8

45561bde03...bd.dll

windows7-x64

10

45561bde03...bd.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45561bde036f7511c565822f93b971dbfb837e21fe7a55927be81390a507afbd

  • Size

    357KB

  • Sample

    221129-ldvaeafc99

  • MD5

    aa06b652ae6ead6e39d6a9c7272704b0

  • SHA1

    ad1688b6cd27e8f42800c6cb111625dbb92dd546

  • SHA256

    45561bde036f7511c565822f93b971dbfb837e21fe7a55927be81390a507afbd

  • SHA512

    00fe1a92209e17a9967ddd5c27cb9aa5578757770dec982fca2732f5d023594301555f8b50f12066238b53b277aee513f3ace47a47de79daea182428b7c18b72

  • SSDEEP

    6144:mUwCKjsgGkTWLC/dCQlg1ZJF/ubuBhuYSiyThglj/H5xmmvXUenBw:xw+LkOeg7bUuD7r3rH5xDXUe

Score
10/10
blackmoonbankertrojanvmprotect

Malware Config

Targets

    • Target

      45561bde036f7511c565822f93b971dbfb837e21fe7a55927be81390a507afbd

    • Size

      357KB

    • MD5

      aa06b652ae6ead6e39d6a9c7272704b0

    • SHA1

      ad1688b6cd27e8f42800c6cb111625dbb92dd546

    • SHA256

      45561bde036f7511c565822f93b971dbfb837e21fe7a55927be81390a507afbd

    • SHA512

      00fe1a92209e17a9967ddd5c27cb9aa5578757770dec982fca2732f5d023594301555f8b50f12066238b53b277aee513f3ace47a47de79daea182428b7c18b72

    • SSDEEP

      6144:mUwCKjsgGkTWLC/dCQlg1ZJF/ubuBhuYSiyThglj/H5xmmvXUenBw:xw+LkOeg7bUuD7r3rH5xDXUe

    Score
    10/10
    blackmoonbankertrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks