Overview

overview

10

Static

static

3

e351bad760...a7.dll

windows7-x64

10

e351bad760...a7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e351bad76010c896ccdcb5fcd7e5d1ebe0cb767cd70227ec028dfd2d1fd99ba7

  • Size

    1.5MB

  • Sample

    230608-xztrjshf97

  • MD5

    cfc0e70f53511cdd4bb236e9ebcc692c

  • SHA1

    a218e791f5cdafcf33c59f9386f36b2846da8547

  • SHA256

    e351bad76010c896ccdcb5fcd7e5d1ebe0cb767cd70227ec028dfd2d1fd99ba7

  • SHA512

    863c64a537f68212b0527b9fb5b2462353a264993b9eb9a5b0a19eb5b67e53804cf015814bcc3ca61aa6dfa2cb03b3f55a2fbe582009217f6d96ba34f54eabae

  • SSDEEP

    24576:HJizxbQGs2xeDZHembNnZmYOOV2jMQP2xV/1CP2kDjgPCSaKBCLiJphqzsghami:HMzxURwo+mb2Y32jMQs/1C9jgqSaKB68

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      e351bad76010c896ccdcb5fcd7e5d1ebe0cb767cd70227ec028dfd2d1fd99ba7

    • Size

      1.5MB

    • MD5

      cfc0e70f53511cdd4bb236e9ebcc692c

    • SHA1

      a218e791f5cdafcf33c59f9386f36b2846da8547

    • SHA256

      e351bad76010c896ccdcb5fcd7e5d1ebe0cb767cd70227ec028dfd2d1fd99ba7

    • SHA512

      863c64a537f68212b0527b9fb5b2462353a264993b9eb9a5b0a19eb5b67e53804cf015814bcc3ca61aa6dfa2cb03b3f55a2fbe582009217f6d96ba34f54eabae

    • SSDEEP

      24576:HJizxbQGs2xeDZHembNnZmYOOV2jMQP2xV/1CP2kDjgPCSaKBCLiJphqzsghami:HMzxURwo+mb2Y32jMQs/1C9jgqSaKB68

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks