Analysis
-
max time kernel
151s -
max time network
32s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
29-05-2023 11:44
General
-
Target
7c20f309c192690ac5ffaf2d35cf09f59ad372398071ad95b9e9a536d74ada1c.exe
-
Size
809KB
-
MD5
20693f052b1302fe07a8a1020f7d562d
-
SHA1
28e652e1b9d4626e2d164ca814f1b26d106e29e2
-
SHA256
7c20f309c192690ac5ffaf2d35cf09f59ad372398071ad95b9e9a536d74ada1c
-
SHA512
ed3e238fff80ea8a195e21add585c7fd6c485a0a492a9869c31efb1535c1f294169c5f1ea068ca8b637cc91594899d5a8588eeb9cc8c391d61f2d678afc61c41
-
SSDEEP
12288:v8skPUmtugiI6UO7TnwFsR3OQ4+GkueUCgH:0/PULgm7LOsRBGkue
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 12 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7c20f309c192690ac5ffaf2d35cf09f59ad372398071ad95b9e9a536d74ada1c.exe"C:\Users\Admin\AppData\Local\Temp\7c20f309c192690ac5ffaf2d35cf09f59ad372398071ad95b9e9a536d74ada1c.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
36KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB