Overview

overview

10

Static

static

3

c9ac46d8ae...ca.dll

windows7-x64

10

c9ac46d8ae...ca.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9ac46d8ae78dfeae3635019b3b191079fcd5ad6830821a30b0a60345b0aaaca

  • Size

    1.7MB

  • Sample

    230518-ya2xasdf27

  • MD5

    b75deef48a7ef28fae267b3a2313ed18

  • SHA1

    b94a7050ca6f7f9b8ff4a70febcc7a450f2871ce

  • SHA256

    c9ac46d8ae78dfeae3635019b3b191079fcd5ad6830821a30b0a60345b0aaaca

  • SHA512

    16ef34580b649e001cd70e4eefedc5999860070cdefc5bc9c37cda9634faa639766c3c8b2f7b122f6ba844c3bab37b5a324ca96941e8e731e06efc900b6fc77b

  • SSDEEP

    49152:KyLbFmE4vp0nBP9cxe0qTfkdj5L0OCupEI9+30oEPY:tLbFmE4R0nbtdy5L0be1oE

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      c9ac46d8ae78dfeae3635019b3b191079fcd5ad6830821a30b0a60345b0aaaca

    • Size

      1.7MB

    • MD5

      b75deef48a7ef28fae267b3a2313ed18

    • SHA1

      b94a7050ca6f7f9b8ff4a70febcc7a450f2871ce

    • SHA256

      c9ac46d8ae78dfeae3635019b3b191079fcd5ad6830821a30b0a60345b0aaaca

    • SHA512

      16ef34580b649e001cd70e4eefedc5999860070cdefc5bc9c37cda9634faa639766c3c8b2f7b122f6ba844c3bab37b5a324ca96941e8e731e06efc900b6fc77b

    • SSDEEP

      49152:KyLbFmE4vp0nBP9cxe0qTfkdj5L0OCupEI9+30oEPY:tLbFmE4R0nbtdy5L0be1oE

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks