Analysis
-
max time kernel
144s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
11-06-2023 04:15
General
-
Target
ca388b80226de2bee6c5d795b7905df43f9bac1c9495cfc64895efdb0a1b9e48.exe
-
Size
353KB
-
MD5
86373fa12d889bf88d9df2c8d7d897f3
-
SHA1
4f90bb791c1d5e2332c5346dede176eedbc0dd9a
-
SHA256
ca388b80226de2bee6c5d795b7905df43f9bac1c9495cfc64895efdb0a1b9e48
-
SHA512
d2588db478b4d7e0c3245be40559ec580f4216eb6233a6d7011ccb27170d1e64987ccb6e74f99592bb66fd589b317bd49cd625aa9c61d3bda131cef83aff5184
-
SSDEEP
6144:yBzIWlTK/SysJoYL2O5NeSPL0LzNjR8KAARdYM09rCFrPyd7ECQtEOd9b5sFjVfL:yZlewoO5V0LMJAnsrcy0t5d9b5gjVfQg
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 3 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ca388b80226de2bee6c5d795b7905df43f9bac1c9495cfc64895efdb0a1b9e48.exe"C:\Users\Admin\AppData\Local\Temp\ca388b80226de2bee6c5d795b7905df43f9bac1c9495cfc64895efdb0a1b9e48.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.2MB
-
Filesize
2.2MB