Overview

overview

10

Static

static

3

e02883ec24...54.dll

windows7-x64

10

e02883ec24...54.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e02883ec247d19928c29f16322f265d27a7a4b75ef639e5d4a5a2c8e6aea5354

  • Size

    1.4MB

  • Sample

    230627-yfptxsgb6s

  • MD5

    bd9c436782c27c67ef3e2766fc1fe35c

  • SHA1

    52a39c5c4dfdb8d4c3338e018a83d6701f895671

  • SHA256

    e02883ec247d19928c29f16322f265d27a7a4b75ef639e5d4a5a2c8e6aea5354

  • SHA512

    bd844740d15b32a40e8f9eb4596524ff929e7054d833eb30ea75800fcafff3d96c15baf0ab83532e311ef331d95faea4f54eb21d5f7d3623a3d7cd7cd2c4b537

  • SSDEEP

    24576:/CKPUvEeQXfTJoMSfFnazvJJijWFIj2PP9xFhLvTSMMDxMOA/0+WXWW198Wm4hrw:/n8vEfPKMSftsJOWFjHLvT3MDxB5h1Dj

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      e02883ec247d19928c29f16322f265d27a7a4b75ef639e5d4a5a2c8e6aea5354

    • Size

      1.4MB

    • MD5

      bd9c436782c27c67ef3e2766fc1fe35c

    • SHA1

      52a39c5c4dfdb8d4c3338e018a83d6701f895671

    • SHA256

      e02883ec247d19928c29f16322f265d27a7a4b75ef639e5d4a5a2c8e6aea5354

    • SHA512

      bd844740d15b32a40e8f9eb4596524ff929e7054d833eb30ea75800fcafff3d96c15baf0ab83532e311ef331d95faea4f54eb21d5f7d3623a3d7cd7cd2c4b537

    • SSDEEP

      24576:/CKPUvEeQXfTJoMSfFnazvJJijWFIj2PP9xFhLvTSMMDxMOA/0+WXWW198Wm4hrw:/n8vEfPKMSftsJOWFjHLvT3MDxB5h1Dj

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks