Overview

overview

10

Static

static

8

21091e6d79...3d.dll

windows7-x64

10

21091e6d79...3d.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    21091e6d7989c86c6f898a6b3d024d62cfb7c075e4c6f347e6db5f81e107143d

  • Size

    334KB

  • Sample

    221129-qbhwtaeb9y

  • MD5

    8c5efc7e03db2d57e05b09feaa39ce80

  • SHA1

    0c5add623ef557474040297819bb7923d63e0d92

  • SHA256

    21091e6d7989c86c6f898a6b3d024d62cfb7c075e4c6f347e6db5f81e107143d

  • SHA512

    7bd73d889fa82006fba059eb35676607f8c62c91314eac86b809bf630ccbfce5bd0603efe125733f231381dcbb3c93d45873d98fec6d5a81e0acda9c9ac58987

  • SSDEEP

    6144:hHexpX96XD2kn+sBra33pPUz147sLV6X6QXJT2:hUXoTtH5YiB47OsXdXJT2

Score
10/10
blackmoonbankertrojanvmprotect

Malware Config

Targets

    • Target

      21091e6d7989c86c6f898a6b3d024d62cfb7c075e4c6f347e6db5f81e107143d

    • Size

      334KB

    • MD5

      8c5efc7e03db2d57e05b09feaa39ce80

    • SHA1

      0c5add623ef557474040297819bb7923d63e0d92

    • SHA256

      21091e6d7989c86c6f898a6b3d024d62cfb7c075e4c6f347e6db5f81e107143d

    • SHA512

      7bd73d889fa82006fba059eb35676607f8c62c91314eac86b809bf630ccbfce5bd0603efe125733f231381dcbb3c93d45873d98fec6d5a81e0acda9c9ac58987

    • SSDEEP

      6144:hHexpX96XD2kn+sBra33pPUz147sLV6X6QXJT2:hUXoTtH5YiB47OsXdXJT2

    Score
    10/10
    blackmoonbankertrojanvmprotect

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks