Overview

overview

10

Static

static

10

2023-04-29...id.exe

windows7-x64

7

2023-04-29...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2023-04-29_084b53f7a0920e455110e6d976c2289b_hacktools_icedid

  • Size

    13.5MB

  • Sample

    230430-enx1qaeh68

  • MD5

    084b53f7a0920e455110e6d976c2289b

  • SHA1

    5ec3b3f22afd4c29c3c39aaf227b9f9f6678913c

  • SHA256

    36cb93e2d5dfa498df7eee7c14361597d2e838e6b702b6918c8cf3664adf979e

  • SHA512

    a77586d05867b715ea7e4711d4ad1fbd5b91ab869a1d1a2782fa658df999b41bd88baebca5b7f1031e291c3baf24679470cb21340f9b33ce11ffd88d945dbbf2

  • SSDEEP

    393216:a9yHhd/Ez8IPjlg9wn3NWD3/Dx7okxWmU8U7:awBd/c8UgoMDxMHmU8u

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      2023-04-29_084b53f7a0920e455110e6d976c2289b_hacktools_icedid

    • Size

      13.5MB

    • MD5

      084b53f7a0920e455110e6d976c2289b

    • SHA1

      5ec3b3f22afd4c29c3c39aaf227b9f9f6678913c

    • SHA256

      36cb93e2d5dfa498df7eee7c14361597d2e838e6b702b6918c8cf3664adf979e

    • SHA512

      a77586d05867b715ea7e4711d4ad1fbd5b91ab869a1d1a2782fa658df999b41bd88baebca5b7f1031e291c3baf24679470cb21340f9b33ce11ffd88d945dbbf2

    • SSDEEP

      393216:a9yHhd/Ez8IPjlg9wn3NWD3/Dx7okxWmU8U7:awBd/c8UgoMDxMHmU8u

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks