Analysis
-
max time kernel
150s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
11-05-2023 03:49
General
-
Target
c7ceba999ae1987059509ac4eaec21b32800e501005fffeead566bf2f9d5c29c.exe
-
Size
2.2MB
-
MD5
f772f257f10db544eae72c462f21878c
-
SHA1
0104c7d4942a552504f7e287b06b8dbb43d2874b
-
SHA256
c7ceba999ae1987059509ac4eaec21b32800e501005fffeead566bf2f9d5c29c
-
SHA512
fe9bf66e6ab072c4c79e82a3bd5d33f0478d93d8bfcb52ce2c3b1a2f49e346591c8adf4a00ebd143584b703ee2ef97d5014101b56d3104e90a560382e09483a5
-
SSDEEP
49152:brZlHdYb+Z434XQsJ7WOwzcLtC6L1Rm3tWXm+K+WqCsm:b9rS+nQALw8tVBR8tWXrVWBsm
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 3 IoCs
-
UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c7ceba999ae1987059509ac4eaec21b32800e501005fffeead566bf2f9d5c29c.exe"C:\Users\Admin\AppData\Local\Temp\c7ceba999ae1987059509ac4eaec21b32800e501005fffeead566bf2f9d5c29c.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.5MB
-
Filesize
460KB
-
Filesize
216KB
-
Filesize
76KB
-
Filesize
216KB
-
Filesize
4KB
-
Filesize
4.5MB
-
Filesize
216KB
-
Filesize
4.5MB