Overview

overview

10

Static

static

3

04323199.dll

windows7-x64

10

04323199.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04323199.exe

  • Size

    1.5MB

  • Sample

    230531-ht1wcadh2z

  • MD5

    41d085710f39cbd602231c19064da772

  • SHA1

    23952c9f39bf95cf3c23437192d4d120a0e3eb05

  • SHA256

    8b70b64f2a52a1077871aa2b5981ea1478786cbdcc4d7ec2b61b48bdc0dad083

  • SHA512

    207ea2f42b856142f230b66084a0a2853d924e4b0e5025f17e4fb23fc21f051f86d1c6dd9f6f7206613f4acf5fdd8a14180d36fc8d5579d3a7c06a330848f980

  • SSDEEP

    24576:Ux1UBPEKrpVXeL84kzLSN/iprn/KpC4he+sstRg1dj7uk:73ukzLSlNhe+sMg/3L

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      04323199.exe

    • Size

      1.5MB

    • MD5

      41d085710f39cbd602231c19064da772

    • SHA1

      23952c9f39bf95cf3c23437192d4d120a0e3eb05

    • SHA256

      8b70b64f2a52a1077871aa2b5981ea1478786cbdcc4d7ec2b61b48bdc0dad083

    • SHA512

      207ea2f42b856142f230b66084a0a2853d924e4b0e5025f17e4fb23fc21f051f86d1c6dd9f6f7206613f4acf5fdd8a14180d36fc8d5579d3a7c06a330848f980

    • SSDEEP

      24576:Ux1UBPEKrpVXeL84kzLSN/iprn/KpC4he+sstRg1dj7uk:73ukzLSlNhe+sMg/3L

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks