Overview

overview

10

Static

static

d0190ebe45...ff.dll

windows7-x64

8

d0190ebe45...ff.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d0190ebe458f8b4061067ca37f82ba2297c56d380b63d392868ab28d2d8b04ff

  • Size

    1.5MB

  • Sample

    221129-y6gk8sch98

  • MD5

    da9b94d6b5623d26a75121c3292439df

  • SHA1

    fdc9f765bb454e26c1e542f787f62cd37ed7fe99

  • SHA256

    d0190ebe458f8b4061067ca37f82ba2297c56d380b63d392868ab28d2d8b04ff

  • SHA512

    f993d29051035465ccfd3c91bb329c5cb0cd496cdcfe1fab37f3ecefc2a300927e84d486746da5765f76207b4b8c70a57b61b328f8bd2c9fa3a50dd758b307cb

  • SSDEEP

    24576:d7mGHd3AJapUt7yTD1BSDriDJJqDL3Q5qAQgtMl0DT5OsT5tiCfsK7QNR9qb0zXQ:d7vHNHyefuXSJJqDbRDgtM6ROsOCflK/

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      d0190ebe458f8b4061067ca37f82ba2297c56d380b63d392868ab28d2d8b04ff

    • Size

      1.5MB

    • MD5

      da9b94d6b5623d26a75121c3292439df

    • SHA1

      fdc9f765bb454e26c1e542f787f62cd37ed7fe99

    • SHA256

      d0190ebe458f8b4061067ca37f82ba2297c56d380b63d392868ab28d2d8b04ff

    • SHA512

      f993d29051035465ccfd3c91bb329c5cb0cd496cdcfe1fab37f3ecefc2a300927e84d486746da5765f76207b4b8c70a57b61b328f8bd2c9fa3a50dd758b307cb

    • SSDEEP

      24576:d7mGHd3AJapUt7yTD1BSDriDJJqDL3Q5qAQgtMl0DT5OsT5tiCfsK7QNR9qb0zXQ:d7vHNHyefuXSJJqDbRDgtM6ROsOCflK/

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks