Analysis
-
max time kernel
141s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230621-en -
resource tags
-
submitted
01-07-2023 19:41
General
-
Target
f9433d551d96729c4f47675b58cbd5fc8f96da800bf0b9eee90bc53a3ca53c83.exe
-
Size
106KB
-
MD5
389ce133d9acd7c8434986b8d1371118
-
SHA1
0e38f4bd96bf08dd1d221bb881ca5c1bc92996d6
-
SHA256
f9433d551d96729c4f47675b58cbd5fc8f96da800bf0b9eee90bc53a3ca53c83
-
SHA512
b45e80228595264e9226667b8e5df390614edd546ce55bee34feb8a4a9407ba1d2708a2121f6a217f676c7bc1de026cfa1bb6552ffa198c8d003d496eefffd6e
-
SSDEEP
1536:BlYPME74dSkpxn3nEmPtMUy9O2EByfECxZHLy1YKlaMqBk21BRnUXtlbDFjx4uuJ:AZ74dFx31VMUidESHxMQitlhE3
Score
10/10
Malware Config
Signatures
-
Blackmoon, KrBanker
Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.
-
Detect Blackmoon payload 6 IoCs
-
Suspicious behavior: EnumeratesProcesses 10 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f9433d551d96729c4f47675b58cbd5fc8f96da800bf0b9eee90bc53a3ca53c83.exe"C:\Users\Admin\AppData\Local\Temp\f9433d551d96729c4f47675b58cbd5fc8f96da800bf0b9eee90bc53a3ca53c83.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB