Overview

overview

10

Static

static

3

b8945ff522...ea.dll

windows7-x64

10

b8945ff522...ea.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b8945ff522fd7ff2a07e03ac227b9ea783bfa6d909d2e55247951f9889305eea

  • Size

    1.5MB

  • Sample

    230621-1vp5cabf49

  • MD5

    8154e5f53e3d6754573bdaa8e8920372

  • SHA1

    1ab3c6fe8b69a74861a8d9f3cbb237b43556015f

  • SHA256

    b8945ff522fd7ff2a07e03ac227b9ea783bfa6d909d2e55247951f9889305eea

  • SHA512

    b186b6cce9053b1302db159949378f4f80b994e56b47f7f6911dc7691dc8f2708e30527b6d14002a037570d1bf6a94c7e16edeadb1d06f7cb2773170232ec302

  • SSDEEP

    24576:nsPfWnJKPIKhHixlhpxOB9O+PoXffuu2FPfwyiYtNOprdWJ6lIChsZ2MyC17OZED:nsPfW+ur/E9eHj2FPfwiEaXL1SKx3zu

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      b8945ff522fd7ff2a07e03ac227b9ea783bfa6d909d2e55247951f9889305eea

    • Size

      1.5MB

    • MD5

      8154e5f53e3d6754573bdaa8e8920372

    • SHA1

      1ab3c6fe8b69a74861a8d9f3cbb237b43556015f

    • SHA256

      b8945ff522fd7ff2a07e03ac227b9ea783bfa6d909d2e55247951f9889305eea

    • SHA512

      b186b6cce9053b1302db159949378f4f80b994e56b47f7f6911dc7691dc8f2708e30527b6d14002a037570d1bf6a94c7e16edeadb1d06f7cb2773170232ec302

    • SSDEEP

      24576:nsPfWnJKPIKhHixlhpxOB9O+PoXffuu2FPfwyiYtNOprdWJ6lIChsZ2MyC17OZED:nsPfW+ur/E9eHj2FPfwiEaXL1SKx3zu

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks