Overview

overview

10

Static

static

3

0f6ebf0d28...12.dll

windows7-x64

10

0f6ebf0d28...12.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f6ebf0d283cb8d63d3dbbc8d07db38d0e6de82d595fb0981a2b3a52d5f7b212

  • Size

    1.4MB

  • Sample

    230627-yffw1sgb51

  • MD5

    a9d8f51f6de7545b371bb2b304d185cd

  • SHA1

    a206494194aa0dcbb498b7622d814b9ba81a2c3c

  • SHA256

    0f6ebf0d283cb8d63d3dbbc8d07db38d0e6de82d595fb0981a2b3a52d5f7b212

  • SHA512

    a9521f8ddd4285dd0829730b4237e672ea196d0a5dce6bd6e468d5eec25d1c1704dd621cbc51fe4172d521a85554399d0c144bc751242d3212fab3f2cd2f882d

  • SSDEEP

    24576:OyfTxWgblLOJNhZW17ehQhb5TYQopbs+SykZH8jFdOpPP15vgA168K:OW0gU7hARX5dopYJH8pdOpHT4A168K

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      0f6ebf0d283cb8d63d3dbbc8d07db38d0e6de82d595fb0981a2b3a52d5f7b212

    • Size

      1.4MB

    • MD5

      a9d8f51f6de7545b371bb2b304d185cd

    • SHA1

      a206494194aa0dcbb498b7622d814b9ba81a2c3c

    • SHA256

      0f6ebf0d283cb8d63d3dbbc8d07db38d0e6de82d595fb0981a2b3a52d5f7b212

    • SHA512

      a9521f8ddd4285dd0829730b4237e672ea196d0a5dce6bd6e468d5eec25d1c1704dd621cbc51fe4172d521a85554399d0c144bc751242d3212fab3f2cd2f882d

    • SSDEEP

      24576:OyfTxWgblLOJNhZW17ehQhb5TYQopbs+SykZH8jFdOpPP15vgA168K:OW0gU7hARX5dopYJH8pdOpHT4A168K

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks