Overview

overview

10

Static

static

3

b6199ff6e4...af.dll

windows7-x64

10

b6199ff6e4...af.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6199ff6e45cfde9e003ed2c09ce70627e5ed1b8cf31f6a6604160c6f1e624af

  • Size

    5.6MB

  • Sample

    230610-xj87asgc5s

  • MD5

    b3768755a7b8463a90737b996a9714b9

  • SHA1

    b2cd42bbc7ae7841b62873250668ae2c7e1cef7a

  • SHA256

    b6199ff6e45cfde9e003ed2c09ce70627e5ed1b8cf31f6a6604160c6f1e624af

  • SHA512

    fe00024afd7e4c6e7cd2da126bba89de9602546ba1fd3da349126f4a515961ddbe393d683472b543e61dde9e439b1a44b6c301ef69a7cf1416b1beada467c66a

  • SSDEEP

    98304:4qkglGZbjxa6ceSlQUaH90OfTb7czfzwfkZkVsvkA3Yju7pA/mRe0:4xglKxPcqUkeOfT3GcBVsLiIpxQ

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      b6199ff6e45cfde9e003ed2c09ce70627e5ed1b8cf31f6a6604160c6f1e624af

    • Size

      5.6MB

    • MD5

      b3768755a7b8463a90737b996a9714b9

    • SHA1

      b2cd42bbc7ae7841b62873250668ae2c7e1cef7a

    • SHA256

      b6199ff6e45cfde9e003ed2c09ce70627e5ed1b8cf31f6a6604160c6f1e624af

    • SHA512

      fe00024afd7e4c6e7cd2da126bba89de9602546ba1fd3da349126f4a515961ddbe393d683472b543e61dde9e439b1a44b6c301ef69a7cf1416b1beada467c66a

    • SSDEEP

      98304:4qkglGZbjxa6ceSlQUaH90OfTb7czfzwfkZkVsvkA3Yju7pA/mRe0:4xglKxPcqUkeOfT3GcBVsLiIpxQ

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks