Overview

overview

10

Static

static

7

76d270f536...a4.exe

windows7-x64

10

76d270f536...a4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76d270f536bc267cdf7460b8dbe6c5e21380815b290b94c6cc9c520370ea18a4

  • Size

    1.7MB

  • Sample

    230606-ynnltsfh9x

  • MD5

    8f6438420019c6eb7bb75666ab3de08a

  • SHA1

    8bed9c65493e4848b45d0f82a06e7c6067a5fc43

  • SHA256

    76d270f536bc267cdf7460b8dbe6c5e21380815b290b94c6cc9c520370ea18a4

  • SHA512

    2ff56a7fff9364ad5405f6ae061d99435e41fd45b973c8013dab925761d068eef3ea292b7d3a54d13f6ff8b75e0b513d213fd66e2dca83735f9a87e0108275c0

  • SSDEEP

    49152:qSFGHeEqlySQV9Ppke9SPoQGgrVrBF1lq7:qSsHqK9PCeK9Ggrd14

Score
10/10
blackmoonaspackv2bankertrojan

Malware Config

Targets

    • Target

      76d270f536bc267cdf7460b8dbe6c5e21380815b290b94c6cc9c520370ea18a4

    • Size

      1.7MB

    • MD5

      8f6438420019c6eb7bb75666ab3de08a

    • SHA1

      8bed9c65493e4848b45d0f82a06e7c6067a5fc43

    • SHA256

      76d270f536bc267cdf7460b8dbe6c5e21380815b290b94c6cc9c520370ea18a4

    • SHA512

      2ff56a7fff9364ad5405f6ae061d99435e41fd45b973c8013dab925761d068eef3ea292b7d3a54d13f6ff8b75e0b513d213fd66e2dca83735f9a87e0108275c0

    • SSDEEP

      49152:qSFGHeEqlySQV9Ppke9SPoQGgrVrBF1lq7:qSsHqK9PCeK9Ggrd14

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks