Overview

overview

10

Static

static

1

60a4afd704...27.dll

windows7-x64

10

60a4afd704...27.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60a4afd704ab562b359032152350024df1c53a12b712135a249c2dbca0d00a27

  • Size

    1.5MB

  • Sample

    230401-y5e11sce46

  • MD5

    1eedbd84da8a2761eca0fe9b65f7a912

  • SHA1

    a7f068215d4871ef69a65b744e4529af14f40efc

  • SHA256

    60a4afd704ab562b359032152350024df1c53a12b712135a249c2dbca0d00a27

  • SHA512

    76e92d18d0442a37945a879c8c3c8cf6dc11def0f7bbe8cd2b5eda6082760546fcb158f76bc2aef2a4c706a304f126bcb43b8b6bb02e95eb7c254dcad9914897

  • SSDEEP

    24576:KnRZ8hGqfuzVflpEncUikkGsJLQ+xQuJSGsfWhGvOxAW+FN8yoZb1MGjkmq8Gyd5:KnRZqGqcptUVkhNQMJSGsfWOO2j8Dvhp

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      60a4afd704ab562b359032152350024df1c53a12b712135a249c2dbca0d00a27

    • Size

      1.5MB

    • MD5

      1eedbd84da8a2761eca0fe9b65f7a912

    • SHA1

      a7f068215d4871ef69a65b744e4529af14f40efc

    • SHA256

      60a4afd704ab562b359032152350024df1c53a12b712135a249c2dbca0d00a27

    • SHA512

      76e92d18d0442a37945a879c8c3c8cf6dc11def0f7bbe8cd2b5eda6082760546fcb158f76bc2aef2a4c706a304f126bcb43b8b6bb02e95eb7c254dcad9914897

    • SSDEEP

      24576:KnRZ8hGqfuzVflpEncUikkGsJLQ+xQuJSGsfWhGvOxAW+FN8yoZb1MGjkmq8Gyd5:KnRZqGqcptUVkhNQMJSGsfWOO2j8Dvhp

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks