Overview

overview

10

Static

static

3

9fa8ec7d36...fc.dll

windows7-x64

10

9fa8ec7d36...fc.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9fa8ec7d36557b191e63f4b5a73d4ae0d7fb4b84e148a328be51f5031e4e03fc

  • Size

    1.4MB

  • Sample

    230620-zwz59sec87

  • MD5

    869c43216a6c86185d7f9a267d13fdc6

  • SHA1

    b2026f4bbd159decdda9d35a2ab5de2df5db41e3

  • SHA256

    9fa8ec7d36557b191e63f4b5a73d4ae0d7fb4b84e148a328be51f5031e4e03fc

  • SHA512

    7fddd15cdfdfbeed839b44fc4537ea3fb9ad3aa32cf5705ae15a86228e7209fdedb7d218526b465904f33d756064772bb81247dac585d8ba90a1a4a3e3e72946

  • SSDEEP

    24576:H1+7k4f2nPU3TzKVFkSwMdvWvZENg4kZmtPkhm/LoagKVMCwdSf4zLs7/fY7:Hk7V+nPruSwfiCAMhmjPyCwkfAIjg7

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      9fa8ec7d36557b191e63f4b5a73d4ae0d7fb4b84e148a328be51f5031e4e03fc

    • Size

      1.4MB

    • MD5

      869c43216a6c86185d7f9a267d13fdc6

    • SHA1

      b2026f4bbd159decdda9d35a2ab5de2df5db41e3

    • SHA256

      9fa8ec7d36557b191e63f4b5a73d4ae0d7fb4b84e148a328be51f5031e4e03fc

    • SHA512

      7fddd15cdfdfbeed839b44fc4537ea3fb9ad3aa32cf5705ae15a86228e7209fdedb7d218526b465904f33d756064772bb81247dac585d8ba90a1a4a3e3e72946

    • SSDEEP

      24576:H1+7k4f2nPU3TzKVFkSwMdvWvZENg4kZmtPkhm/LoagKVMCwdSf4zLs7/fY7:Hk7V+nPruSwfiCAMhmjPyCwkfAIjg7

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks