Overview

overview

10

Static

static

7

f8d4586594...9e.exe

windows7-x64

10

f8d4586594...9e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8d45865942239cc5f6ae965da4db996657c63f85f45376a07d52431785eb79e

  • Size

    785KB

  • Sample

    230612-ywdftseb61

  • MD5

    68d245d303e5b95d0d46ef024c8b1cb0

  • SHA1

    6ad709c325bf78ffc93ac3176b06cbcdddd78808

  • SHA256

    f8d45865942239cc5f6ae965da4db996657c63f85f45376a07d52431785eb79e

  • SHA512

    ba65d2d932671f8310be3df31115a254ee18fbeec338b3d8d09a53bb9db2a55ac1cb931b570f2292912200a728308656ce59236fe4973a7eb57793c85c2883a8

  • SSDEEP

    12288:d6IZNik0eAMp0PpXcD0pvkbLu/NMI9btnZJ+8UCgH:pok0e1peQ0pvkPu/NM+n1

Score
10/10
blackmoonaspackv2bankertrojan

Malware Config

Targets

    • Target

      f8d45865942239cc5f6ae965da4db996657c63f85f45376a07d52431785eb79e

    • Size

      785KB

    • MD5

      68d245d303e5b95d0d46ef024c8b1cb0

    • SHA1

      6ad709c325bf78ffc93ac3176b06cbcdddd78808

    • SHA256

      f8d45865942239cc5f6ae965da4db996657c63f85f45376a07d52431785eb79e

    • SHA512

      ba65d2d932671f8310be3df31115a254ee18fbeec338b3d8d09a53bb9db2a55ac1cb931b570f2292912200a728308656ce59236fe4973a7eb57793c85c2883a8

    • SSDEEP

      12288:d6IZNik0eAMp0PpXcD0pvkbLu/NMI9btnZJ+8UCgH:pok0e1peQ0pvkPu/NM+n1

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks