Overview

overview

10

Static

static

7

f61798e822...c2.exe

windows7-x64

10

f61798e822...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f61798e822a1f5e2185cd19063967042d0b9aeffe0f05119d41e7c7ddebbe3c2

  • Size

    785KB

  • Sample

    230611-xx69vsad6z

  • MD5

    52570d69c17a305934a4955dc880ea28

  • SHA1

    e23096111436eccee4b562a2d787f19140d2cb5e

  • SHA256

    f61798e822a1f5e2185cd19063967042d0b9aeffe0f05119d41e7c7ddebbe3c2

  • SHA512

    84f55e676610ec25e0f0af28db3775205c7695f2aea405f06a505876115becca542ff9359a00193218e205e65223fe15a92d6ccc1117ce84f53d5336c4362d80

  • SSDEEP

    12288:C6mPprWUiYhvqJKUk8ItiaCmQu/7CMtvp0UCgH:grWUimyJe8QXCTu/7CMtvG

Score
10/10
blackmoonaspackv2bankertrojan

Malware Config

Targets

    • Target

      f61798e822a1f5e2185cd19063967042d0b9aeffe0f05119d41e7c7ddebbe3c2

    • Size

      785KB

    • MD5

      52570d69c17a305934a4955dc880ea28

    • SHA1

      e23096111436eccee4b562a2d787f19140d2cb5e

    • SHA256

      f61798e822a1f5e2185cd19063967042d0b9aeffe0f05119d41e7c7ddebbe3c2

    • SHA512

      84f55e676610ec25e0f0af28db3775205c7695f2aea405f06a505876115becca542ff9359a00193218e205e65223fe15a92d6ccc1117ce84f53d5336c4362d80

    • SSDEEP

      12288:C6mPprWUiYhvqJKUk8ItiaCmQu/7CMtvp0UCgH:grWUimyJe8QXCTu/7CMtvG

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks