Overview

overview

10

Static

static

1

155a5bd9ee...46.dll

windows7-x64

10

155a5bd9ee...46.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    155a5bd9ee392f0f3456e7f2295a08a92778f6576f05ffbb639cd48a61c78f46

  • Size

    1.5MB

  • Sample

    230222-xczpaach64

  • MD5

    f4607a61a4e087c9bc97c755b9181b33

  • SHA1

    b21ba1cbcbd54724220f7e911b14ae75579c420d

  • SHA256

    155a5bd9ee392f0f3456e7f2295a08a92778f6576f05ffbb639cd48a61c78f46

  • SHA512

    1500bd32c3df33f0d1db425e1569d0cbf48d5d2cd46dc7a68c47770f293bb7adc4e19c8a9391fcec51ca776bd5a0fb8a54de4fe02d64a8c9efcbfdab3c3d9019

  • SSDEEP

    24576:0E7R4LkcBxma1FsU4ash84O5hjm4zEj/fksXd3x78aySoGjSaY8586KW1e9nnvtX:14Ll2KFsU41hw5o4AjHkQNyajfYlCe9p

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      155a5bd9ee392f0f3456e7f2295a08a92778f6576f05ffbb639cd48a61c78f46

    • Size

      1.5MB

    • MD5

      f4607a61a4e087c9bc97c755b9181b33

    • SHA1

      b21ba1cbcbd54724220f7e911b14ae75579c420d

    • SHA256

      155a5bd9ee392f0f3456e7f2295a08a92778f6576f05ffbb639cd48a61c78f46

    • SHA512

      1500bd32c3df33f0d1db425e1569d0cbf48d5d2cd46dc7a68c47770f293bb7adc4e19c8a9391fcec51ca776bd5a0fb8a54de4fe02d64a8c9efcbfdab3c3d9019

    • SSDEEP

      24576:0E7R4LkcBxma1FsU4ash84O5hjm4zEj/fksXd3x78aySoGjSaY8586KW1e9nnvtX:14Ll2KFsU41hw5o4AjHkQNyajfYlCe9p

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks