Overview

overview

10

Static

static

3

57d2555438...25.dll

windows7-x64

10

57d2555438...25.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57d2555438d69ce2f31f38bf09ac7fc3b536d272aa3eb50701d9e14a5f8bb425

  • Size

    1.4MB

  • Sample

    230629-zmlarafh51

  • MD5

    b0eeb9ddc03bb0f2ef677fc1c756cc4e

  • SHA1

    40d5349e77c4e01a0c1d2628616301ce21f8e479

  • SHA256

    57d2555438d69ce2f31f38bf09ac7fc3b536d272aa3eb50701d9e14a5f8bb425

  • SHA512

    ca9f9bad72b45d56f80fb5b199414246ffcd20afa2a4ef55a94bd3ada547077e995e4b6e6568d814a94b4661053afc892847e7d71eec3e18b582f5d0c921cb87

  • SSDEEP

    24576:N58E90z5gLu8fV75D2rD8k8wdlVQal04rztQkpa5WSLTt9mCAzpjUT6k7MVOVTaH:dygLuMVYrDFLl0z7gSL2xQ6kEIehZv

Score
10/10
blackmoonbankertrojan

Malware Config

Targets

    • Target

      57d2555438d69ce2f31f38bf09ac7fc3b536d272aa3eb50701d9e14a5f8bb425

    • Size

      1.4MB

    • MD5

      b0eeb9ddc03bb0f2ef677fc1c756cc4e

    • SHA1

      40d5349e77c4e01a0c1d2628616301ce21f8e479

    • SHA256

      57d2555438d69ce2f31f38bf09ac7fc3b536d272aa3eb50701d9e14a5f8bb425

    • SHA512

      ca9f9bad72b45d56f80fb5b199414246ffcd20afa2a4ef55a94bd3ada547077e995e4b6e6568d814a94b4661053afc892847e7d71eec3e18b582f5d0c921cb87

    • SSDEEP

      24576:N58E90z5gLu8fV75D2rD8k8wdlVQal04rztQkpa5WSLTt9mCAzpjUT6k7MVOVTaH:dygLuMVYrDFLl0z7gSL2xQ6kEIehZv

    Score
    10/10
    blackmoonbankertrojan

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks