Overview

overview

10

Static

static

7

f8d4586594...9e.exe

windows7-x64

10

f8d4586594...9e.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    140s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-06-2023 20:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f8d45865942239cc5f6ae965da4db996657c63f85f45376a07d52431785eb79e.exe

  • Size

    785KB

  • MD5

    68d245d303e5b95d0d46ef024c8b1cb0

  • SHA1

    6ad709c325bf78ffc93ac3176b06cbcdddd78808

  • SHA256

    f8d45865942239cc5f6ae965da4db996657c63f85f45376a07d52431785eb79e

  • SHA512

    ba65d2d932671f8310be3df31115a254ee18fbeec338b3d8d09a53bb9db2a55ac1cb931b570f2292912200a728308656ce59236fe4973a7eb57793c85c2883a8

  • SSDEEP

    12288:d6IZNik0eAMp0PpXcD0pvkbLu/NMI9btnZJ+8UCgH:pok0e1peQ0pvkPu/NM+n1

Score
10/10
blackmoonbankertrojan

Malware Config

Signatures

  • Blackmoon, KrBanker

    Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    trojanbankerblackmoon
  • Detect Blackmoon payload 17 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f8d45865942239cc5f6ae965da4db996657c63f85f45376a07d52431785eb79e.exe
    "C:\Users\Admin\AppData\Local\Temp\f8d45865942239cc5f6ae965da4db996657c63f85f45376a07d52431785eb79e.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4112-133-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-135-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-134-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-136-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-137-0x0000000010000000-0x0000000010009000-memory.dmp

    Filesize

    36KB

    Download

  • memory/4112-140-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-141-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-142-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-143-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-144-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-145-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-146-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-147-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-148-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-149-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-150-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-151-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-152-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download

  • memory/4112-153-0x0000000000400000-0x000000000061D000-memory.dmp

    Filesize

    2.1MB

    Download