Overview

overview

10

Static

static

8

f75d4e38d8...4f.dll

windows7-x64

10

f75d4e38d8...4f.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f75d4e38d8c6bf8ebd5b56202ad36ee753e66d29747441b04930a182d8d9f84f

  • Size

    359KB

  • Sample

    221129-mpe6asbb66

  • MD5

    7c8fd573e9f4ea2e8bd6849b87c9b6c0

  • SHA1

    bdbab9ba3759acbd3b217f05efc284c6e600669a

  • SHA256

    f75d4e38d8c6bf8ebd5b56202ad36ee753e66d29747441b04930a182d8d9f84f

  • SHA512

    9bb43eca65850a8a40d29e878d61951ff3be56483dbb3abc4286150f9b012840eded3d08254e66222155620f9f9f536fe5077c011d9cd0b720b57e3a0a3e2019

  • SSDEEP

    6144:BocgrXhqU6TBPkU+89f8fnatcQ4VMagw9cFLKmYDyIl72gI6GV3KfoaV8J:29rRZMhkUx9Snat14WdOcAmYDyy72x6I

Score
10/10
blackmoonbankertrojanvmprotect

Malware Config

Targets

    • Target

      f75d4e38d8c6bf8ebd5b56202ad36ee753e66d29747441b04930a182d8d9f84f

    • Size

      359KB

    • MD5

      7c8fd573e9f4ea2e8bd6849b87c9b6c0

    • SHA1

      bdbab9ba3759acbd3b217f05efc284c6e600669a

    • SHA256

      f75d4e38d8c6bf8ebd5b56202ad36ee753e66d29747441b04930a182d8d9f84f

    • SHA512

      9bb43eca65850a8a40d29e878d61951ff3be56483dbb3abc4286150f9b012840eded3d08254e66222155620f9f9f536fe5077c011d9cd0b720b57e3a0a3e2019

    • SSDEEP

      6144:BocgrXhqU6TBPkU+89f8fnatcQ4VMagw9cFLKmYDyIl72gI6GV3KfoaV8J:29rRZMhkUx9Snat14WdOcAmYDyy72x6I

    Score
    10/10
    blackmoonbankertrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks