blackmoon | 54db8352f6d19e7ab334d3df3da3a335c201490f265cfbc83f009a4a16937e47 | Triage

Submit
Reports

Overview

overview

Static

static

54db8352f6...f3.exe

windows7-x64

54db8352f6...f3.exe

windows10-2004-x64

Sharing

General

Target

54db8352f6d19e7ab334d3df3.exe
Size

244KB
Sample

230709-hvrdasba72
MD5

88e12800e87bc9a3f34fe9ef6070299a
SHA1

0898875ef0c079f757f0b45cc34566df13c44070
SHA256

54db8352f6d19e7ab334d3df3da3a335c201490f265cfbc83f009a4a16937e47
SHA512

630e90c68a9d6954ae4658ee97020e2882c88765369046588237bc5a95027f9f932680a693cdc62addaed349237e315d1a52b2b843255c2070a830fa82ecedda
SSDEEP

3072:MFXMiTZOek0drM6a4VsBGcddZ2G3xebtv+xsmz:MFXMiTZxdrpK1vEZd

Score

10^/10

blackmoon evasion phishing trojan

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

54db8352f6d19e7ab334d3df3.exe

Resource

win7-20230703-en

evasion phishing trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

54db8352f6d19e7ab334d3df3.exe

Resource

win10v2004-20230703-en

evasion phishing trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  54db8352f6d19e7ab334d3df3.exe
- Size
  
  244KB
- MD5
  
  88e12800e87bc9a3f34fe9ef6070299a
- SHA1
  
  0898875ef0c079f757f0b45cc34566df13c44070
- SHA256
  
  54db8352f6d19e7ab334d3df3da3a335c201490f265cfbc83f009a4a16937e47
- SHA512
  
  630e90c68a9d6954ae4658ee97020e2882c88765369046588237bc5a95027f9f932680a693cdc62addaed349237e315d1a52b2b843255c2070a830fa82ecedda
- SSDEEP
  
  3072:MFXMiTZOek0drM6a4VsBGcddZ2G3xebtv+xsmz:MFXMiTZxdrpK1vEZd
Score

10^/10

evasion phishing trojan
- Detected phishing page
  phishing
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionphishingtrojan

behavioral2

evasionphishingtrojan

© 2018-2024

Terms | Privacy