Overview

overview

10

Static

static

3

9c7c91876d...b0.dll

windows7-x64

10

9c7c91876d...b0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c7c91876ddc24eee68516645c1a389371d6c5de3acbc708bed3ef094375ffb0

  • Size

    1.6MB

  • Sample

    230524-ybl78see97

  • MD5

    2081bf969cf06a9a43e80ee4d8de9051

  • SHA1

    0d6e50b335b7b3338f3d7a91e9ea2c34336c5d5a

  • SHA256

    9c7c91876ddc24eee68516645c1a389371d6c5de3acbc708bed3ef094375ffb0

  • SHA512

    bf1bccb846cc162caefefa88d96f3a78edb01f8b1b5c543d1ca2b5cba7010f0144eb9b3bb80ba2a6805014cf199c52f1d0b57075428b2678330e0dbf15235b7a

  • SSDEEP

    49152:5QDRzMwG0Gw4Sely3opzlGqP0IBoW4r4pJKBbZYe8n9naPCR:u1MwG0Gw4Sk5zcqP0Om8pJ7e89aPk

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      9c7c91876ddc24eee68516645c1a389371d6c5de3acbc708bed3ef094375ffb0

    • Size

      1.6MB

    • MD5

      2081bf969cf06a9a43e80ee4d8de9051

    • SHA1

      0d6e50b335b7b3338f3d7a91e9ea2c34336c5d5a

    • SHA256

      9c7c91876ddc24eee68516645c1a389371d6c5de3acbc708bed3ef094375ffb0

    • SHA512

      bf1bccb846cc162caefefa88d96f3a78edb01f8b1b5c543d1ca2b5cba7010f0144eb9b3bb80ba2a6805014cf199c52f1d0b57075428b2678330e0dbf15235b7a

    • SSDEEP

      49152:5QDRzMwG0Gw4Sely3opzlGqP0IBoW4r4pJKBbZYe8n9naPCR:u1MwG0Gw4Sk5zcqP0Om8pJ7e89aPk

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks