Overview

overview

10

Static

static

3

af67c7d2f3...2b.dll

windows7-x64

10

af67c7d2f3...2b.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af67c7d2f341ced9a4ecf88d2d736d9e34c9292c1b2a276f6067bb7e9ebfe92b

  • Size

    1.7MB

  • Sample

    230608-yq3tjahh43

  • MD5

    9eeb8f7487522c7bbc387c0f41285a8f

  • SHA1

    8fc463f78caea8b4ca98c1cdaca9f7113bffc00b

  • SHA256

    af67c7d2f341ced9a4ecf88d2d736d9e34c9292c1b2a276f6067bb7e9ebfe92b

  • SHA512

    2c9f189f3e2c7db2ae6ef1ea78162d11ac7c5280b4a66b29d452a547ed33d07e1766b56c9527972cc5d82d3881e7adf33fc1a8b6e370f8c6074c9620b6859801

  • SSDEEP

    49152:vlOj7TXgufTZNgITbOYbGullnlfTZ8MIKswkY+YZBR3T7wR:EbLHgIOYXnlbZnIKA/WD3Ty

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      af67c7d2f341ced9a4ecf88d2d736d9e34c9292c1b2a276f6067bb7e9ebfe92b

    • Size

      1.7MB

    • MD5

      9eeb8f7487522c7bbc387c0f41285a8f

    • SHA1

      8fc463f78caea8b4ca98c1cdaca9f7113bffc00b

    • SHA256

      af67c7d2f341ced9a4ecf88d2d736d9e34c9292c1b2a276f6067bb7e9ebfe92b

    • SHA512

      2c9f189f3e2c7db2ae6ef1ea78162d11ac7c5280b4a66b29d452a547ed33d07e1766b56c9527972cc5d82d3881e7adf33fc1a8b6e370f8c6074c9620b6859801

    • SSDEEP

      49152:vlOj7TXgufTZNgITbOYbGullnlfTZ8MIKswkY+YZBR3T7wR:EbLHgIOYXnlbZnIKA/WD3Ty

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks