Overview

overview

10

Static

static

10

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    7.3MB

  • Sample

    230519-nga22sgc7t

  • MD5

    d3bf474de7039be1758918653d179d54

  • SHA1

    49b3c66dd93ba512e3dc423339d77a15b79efc05

  • SHA256

    81061ca8835f361cb6554ce48c1dac634e40486b3d9b36dc00448f40dc0a9a7c

  • SHA512

    8ba871edf781bd3ea6f27dc43e5a783b6475874d34438a364d80d9dfcda1faa8271a3e15d22de2159354fca0bafff7e4ce9443210cfce83fb254b528e688ee00

  • SSDEEP

    196608:EiNibKiPyg8KD0fJHPcgAL9fvbmEB5Rxg0nb:EiwPp0xHPahvbbrb

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      tmp

    • Size

      7.3MB

    • MD5

      d3bf474de7039be1758918653d179d54

    • SHA1

      49b3c66dd93ba512e3dc423339d77a15b79efc05

    • SHA256

      81061ca8835f361cb6554ce48c1dac634e40486b3d9b36dc00448f40dc0a9a7c

    • SHA512

      8ba871edf781bd3ea6f27dc43e5a783b6475874d34438a364d80d9dfcda1faa8271a3e15d22de2159354fca0bafff7e4ce9443210cfce83fb254b528e688ee00

    • SSDEEP

      196608:EiNibKiPyg8KD0fJHPcgAL9fvbmEB5Rxg0nb:EiwPp0xHPahvbbrb

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Downloads MZ/PE file

    • Drops file in Drivers directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks