Overview

overview

10

Static

static

8

7aed80f9c4...b7.dll

windows7-x64

10

7aed80f9c4...b7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7aed80f9c4cadc43e40b56f8cd8e70509a46918d87b87c91ae8a2d729a23afb7

  • Size

    366KB

  • Sample

    221129-pcgvgabc4x

  • MD5

    3d71c09344a0159188ca85f7a6c1eeb0

  • SHA1

    86069c3f28bcbbeef3c29a038d67402eada1d5a1

  • SHA256

    7aed80f9c4cadc43e40b56f8cd8e70509a46918d87b87c91ae8a2d729a23afb7

  • SHA512

    3b484337793e594df68c79a7f35373cc19cf31d2a2c1cbab837e7f700cdfe691a38e9439ac9fb92577ff2c0cbf46883e8752fccad494824d969eb95a9e892405

  • SSDEEP

    6144:GoiItmwgmFLHUJAL+dlgeUtHdwAyPnfC1n7rD9WU259w0Ky:zBygL06klgeU5dwAHJ7P9W15w

Score
10/10
blackmoonbankertrojanvmprotect

Malware Config

Targets

    • Target

      7aed80f9c4cadc43e40b56f8cd8e70509a46918d87b87c91ae8a2d729a23afb7

    • Size

      366KB

    • MD5

      3d71c09344a0159188ca85f7a6c1eeb0

    • SHA1

      86069c3f28bcbbeef3c29a038d67402eada1d5a1

    • SHA256

      7aed80f9c4cadc43e40b56f8cd8e70509a46918d87b87c91ae8a2d729a23afb7

    • SHA512

      3b484337793e594df68c79a7f35373cc19cf31d2a2c1cbab837e7f700cdfe691a38e9439ac9fb92577ff2c0cbf46883e8752fccad494824d969eb95a9e892405

    • SSDEEP

      6144:GoiItmwgmFLHUJAL+dlgeUtHdwAyPnfC1n7rD9WU259w0Ky:zBygL06klgeU5dwAHJ7P9W15w

    Score
    10/10
    blackmoonbankertrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks